[keycloak-user] Query param with "code" property name will get 400 Bad request

Stian Thorgersen stian at redhat.com
Mon Sep 8 04:17:00 EDT 2014


This is caused by the adapters assuming that any request with a code query param is a oauth2 callback. It's less than ideal, so can you create a jira issue please?

----- Original Message -----
> From: "Christina Lau" <christinalau28 at icloud.com>
> To: keycloak-user at lists.jboss.org
> Sent: Wednesday, 3 September, 2014 1:14:36 PM
> Subject: [keycloak-user] Query param with "code" property name will get 400	Bad request
> 
> Hi, I have an app deployed on Keycloak, whenever I add a query parameter to
> any URL with the property name of “code", I get a 400 Bad Request (whether
> it's a static file or a servlet).
> 
> The same app on JBoss does not have the same issue. Is this a bug?
> 
> Here are two URLs to try out, both unsecure:
> 
> JBoss EAP:
> http://jbosseap-test.apps.qatest.biz/v1/cloudproviders?code=100
> 
> Keycloak:
> 
> http://ec2-54-84-240-18.compute-1.amazonaws.com:8080/dsgapi/cloudproviders?code=123
> 
> Christina
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user



More information about the keycloak-user mailing list