[keycloak-user] Query param with "code" property name will get 400 Bad request

Christina Lau christinalau28 at icloud.com
Mon Sep 8 10:17:50 EDT 2014


I opened this. Will it be possible to get it fix in the GA release? Otherwise we have to try another work around. Thx.

https://issues.jboss.org/browse/KEYCLOAK-664

On Sep 8, 2014, at 4:17 AM, Stian Thorgersen <stian at redhat.com> wrote:

> This is caused by the adapters assuming that any request with a code query param is a oauth2 callback. It's less than ideal, so can you create a jira issue please?
> 
> ----- Original Message -----
>> From: "Christina Lau" <christinalau28 at icloud.com>
>> To: keycloak-user at lists.jboss.org
>> Sent: Wednesday, 3 September, 2014 1:14:36 PM
>> Subject: [keycloak-user] Query param with "code" property name will get 400	Bad request
>> 
>> Hi, I have an app deployed on Keycloak, whenever I add a query parameter to
>> any URL with the property name of “code", I get a 400 Bad Request (whether
>> it's a static file or a servlet).
>> 
>> The same app on JBoss does not have the same issue. Is this a bug?
>> 
>> Here are two URLs to try out, both unsecure:
>> 
>> JBoss EAP:
>> http://jbosseap-test.apps.qatest.biz/v1/cloudproviders?code=100
>> 
>> Keycloak:
>> 
>> http://ec2-54-84-240-18.compute-1.amazonaws.com:8080/dsgapi/cloudproviders?code=123
>> 
>> Christina
>> 
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user




More information about the keycloak-user mailing list