[keycloak-dev] Master update breaks account console
Marek Posolda
mposolda at redhat.com
Thu Nov 14 16:55:01 EST 2019
I guess it is related to this change:
https://github.com/keycloak/keycloak/commit/913056b2b2d39707347a39dddb7bdad69fe47cc3
Some details in the thread "Credentials in javascript adapter" on this
mailing list.
Marek
On 14. 11. 19 20:28, Stan Silvert wrote:
> Fixing the slash was no problem but it looks like something else is
> broken. Trying to initialize Keycloak, it gets a 400 error when it's
> trying to
> dohttp://localhost:8080/auth/realms/master/protocol/openid-connect/token
>
> Server side:
>
> 14:21:45,918 WARN [org.keycloak.events] (default task-24)
> type=CODE_TO_TOKEN_ERROR, realmId=master, clientId=account, userId=null,
> ipAddress=127.0.0.1, error=invalid_client_credentials,
> grant_type=authorization_code
>
>
> Any ideas?
>
> On 11/14/2019 6:56 AM, Stian Thorgersen wrote:
>> Yes, this was changed due to default hostname provider.
>>
>> Stan do you need the auth-url or a URL to something else? If the
>> latter the safest is to use the builder to get the path, unless you
>> are doing that on the client side.
>>
>> On Thu, 14 Nov 2019 at 10:07, Jan Lieskovsky <jlieskov at redhat.com
>> <mailto:jlieskov at redhat.com>> wrote:
>>
>>
>> On Wed, Nov 13, 2019 at 10:46 PM Stan Silvert <ssilvert at redhat.com
>> <mailto:ssilvert at redhat.com>> wrote:
>>
>> In new account console, I pass the auth URL to Freemarker. I
>> call:
>>
>> session.getContext().getUri(UrlType.FRONTEND).getBaseUri().toString())
>>
>> This has always returned something like
>> "http://localhost:8080/auth"
>>
>> However, the latest in master puts a slash at the end,
>> "http://localhost:8080/auth/"
>>
>>
>> I can easily update my code for this to work, but I'm
>> concerned that
>> this change might have broken more than just the new account
>> console.
>> Perhaps other code in the community is relying on the URL not
>> having a
>> slash at the end.
>>
>> Does anyone recognize the change that might have caused this?
>>
>>
>> Might be related with the recent new default hostname provider
>> (KEYCLOAK-11728) change.
>> At least this change in corresponding test acceptance criteria
>> <https://github.com/keycloak/keycloak/commit/b8881b8ea062afa2f1b5a613dd856900b73f2121#diff-42f10e03d16b143ad9c65c3791f8c387L92>
>> would suggest so.
>>
>> But given the corresponding test was changed to expect slash at
>> the end, I would say this
>> is expected behaviour now. @Stian Thorgersen
>> <mailto:stian at redhat.com> Can you confirm?
>>
>>
>> Stan
>>
>>
>> Thank you && Regards, Jan
>> --
>> Jan iankko Lieskovsky / Keycloak / RH-SSO Team
>>
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org <mailto:keycloak-dev at lists.jboss.org>
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
More information about the keycloak-dev
mailing list