[keycloak-user] KeycloakOIDCFilter infinite loop after authentication

[Marek Posolda]

Not sure it's related, just noticed some inconsistency. The 
"auth-server-url" in keycloak.json points to "localhost:18080" but web 
porigin "localhost:8080" . Couldn't it be that?

Marek

On 22/01/18 14:32, Thomas Isaksen wrote:
> Hi
>
> I tried sending another mail containing a fiddler log but it bounced for some reason. Anyway,
>
> I have configured the filter on weblogic 12.2.1.3 as follows:
>
> <filter>
>      <filter-name>Keycloak Filter</filter-name>
>      <filter-class>org.keycloak.adapters.servlet.KeycloakOIDCFilter</filter-class>
>      <init-param>
>          <param-name>keycloak.config.skipPattern</param-name>
>          <param-value>^(example1|example2|whatever).*</param-value>
>      </init-param>
> </filter>
> <filter-mapping>
>      <filter-name>Keycloak Filter</filter-name>
>      <url-pattern>/keycloak/*</url-pattern>
>      <url-pattern>/*</url-pattern>
> </filter-mapping>
>
> My keycloak.json is located in /WEB-INF/
>
> {
>    "realm": "Toyota Development",
>    "auth-server-url": "http://localhost:18080/auth",
>    "ssl-required": "external",
>    "resource": "dummyWeb",
>    "credentials": {
>      "secret": "e9be44b7-394b-40d9-a8c0-203cdb9c450b"
>    },
>    "confidential-port": 0
> }
>
> Client config:
>
> Root URL: http://dev.toyota.no:7002/DummyWeb/
> Valid Redirect URIs: http://dev.toyota.no:7002/DummyWeb/*
> Base URL: http://dev.toyota.no:7002/DummyWeb/
> Admin URL: http://dev.toyota.no:7002/DummyWeb/keycloak
> Web Origins: http://localhost:8080 (keycloak server) http://dev.toyota.no.no:7002
>
>
> Looks like I am getting authenticated but browser is stuck in an infinite loop. If I close the browser and try the same URL again it will go into a loop again unless I clear sessions from the keycloak admin console.
>
> You can see the fiddler log or log as text here:
> https://drive.google.com/drive/folders/1HiwSEe0WBWny3BQCrmXKz3LdNXVRxVVW?usp=sharing
>
> If someone could please have a look at it I would be super happy!
> Thanks!
>
> --
> Thomas Isaksen
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user