By: Markus Tietke user 26 Aug 2019 at 2:38 p.m. CDT

2 Responses
Markus Tietke gravatar
I done the first test with gluu. Now have trouble with claim gathering. I use the default scripts. After requesting for "Access token (RPT) request with permission ticket" i get the redirect to the oxauth/restv1/uma/gather_claims. Now i enter the information "Country" and "City", both is fine. But i get no "Redirect back with new permission ticket". The claims_redirect_uri is null. ``` SessionService] (UmaSessionService.java:60) - Loaded uma_session_id from cookie, session: SessionState {dn='oxAuthSessionId=a207e23f-513b-4c2b-afdf-5fb50852cf95,ou=session,o=@!721B.9830.B5B8.4763!0001!7471.C66C,o=gluu', id='a207e23f-513b-4c2b-afdf-5fb50852cf95', lastUsedAt=Mon Aug 26 19:06:13 UTC 2019, userDn='no', authenticationTime=Mon Aug 26 13:09:19 │ l.ExternalUmaClaimsGatheringService] (ExternalUmaClaimsGatheringService.java:103) - Executing python 'gather' method, script: sampleClaimsGathering │ l.ExternalUmaClaimsGatheringService] (ExternalUmaClaimsGatheringService.java:105) - python 'gather' result: true │ Gatherer] (UmaGatherer.java:84) - Claims-gathering result for script 'sampleClaimsGathering', step: '2', gatheredResult: 'true' │ l.ExternalUmaClaimsGatheringService] (ExternalUmaClaimsGatheringService.java:116) - Executing python 'getNextStep' method, script: sampleClaimsGathering │ l.ExternalUmaClaimsGatheringService] (ExternalUmaClaimsGatheringService.java:118) - python 'getNextStep' result: -1 │ l.ExternalUmaClaimsGatheringService] (ExternalUmaClaimsGatheringService.java:142) - Executing python 'getStepsCount' method, script: sampleClaimsGathering │ l.ExternalUmaClaimsGatheringService] (ExternalUmaClaimsGatheringService.java:144) - python 'getStepsCount' result: 2 │ IdService] (SessionIdService.java:617) - sessionIdAttributes: null │ SessionService] (UmaSessionService.java:80) - Session persisted successfully. Session: SessionState {dn='oxAuthSessionId=a207e23f-513b-4c2b-afdf-5fb50852cf95,ou=session,o=@!721B.9830.B5B8.4763!0001!7471.C66C,o=gluu', id='a207e23f-513b-4c2b-afdf-5fb50852cf95', lastUsedAt=Mon Aug 26 19:06:17 UTC 2019, userDn='no', authenticationTime=Mon Aug 26 13:09:19 UTC│ Gatherer] (UmaGatherer.java:146) - claims_redirect_uri is blank, session: SessionState {dn='oxAuthSessionId=a207e23f-513b-4c2b-afdf-5fb50852cf95,ou=session,o=@!721B.9830.B5B8.4763!0001!7471.C66C,o=gluu', id='a207e23f-513b-4c2b-afdf-5fb50852cf95', lastUsedAt=Mon Aug 26 19:06:17 UTC 2019, userDn='no', authenticationTime=Mon Aug 26 13:09:19 UTC 2019, state=│ Gatherer] (UmaGatherer.java:139) - Redirect to claims_redirect_uri is skipped because it was not provided during request. │ .RequestJobListener] (RequestJobListener.java:52) - Bound request started ``` The UMA 2 spec, 3.3.2 Client Redirect of Requesting Party to Authorization Server for Interactive Claims-Gathering, describe how to set the "claims_redirect_uri" but this does not work. My request is below. Thank you very much in advance for a hint. ``` POST /oxauth/restv1/uma/gather_claims HTTP/1.1 Host: xxxxx Content-Type: application/x-www-form-urlencoded User-Agent: PostmanRuntime/7.15.2 Accept: */* Cache-Control: no-cache Host: xxxxx Cookie: uma_session_id=e1b275ca-5666-4723-8d6a-e4c55cc5b375; session_state=034ca59266cf4182c3c1913f8ac23500add83b59b975b900916b9cac2c1e2395.cd901c7e-04f2-44ef-8f1d-b268d39ec482; opbs=eec34223-dda0-45b6-962a-63d664bf37bd Accept-Encoding: gzip, deflate Content-Length: 206 Connection: keep-alive cache-control: no-cache client_id=%40!721B.9830.B5B8.4763!0001!7471.C66C!0008!32C0.A12E&ticket=310c3b2e-115a-4e68-88c4-f3831c33be07&claims_redirect_uri=https%3A%2F%2F ```

By Yuriy Zabrovarnyy staff 26 Aug 2019 at 2:50 p.m. CDT

Yuriy Zabrovarnyy gravatar
Did you registered claims_redirect_uri with the client? Please provide following: * LDIF of client by which you performed request (this @!721B.9830.B5B8.4763!0001!7471.C66C!0008!32C0.A12E) * oxauth.log file with trace log level Thanks, Yuriy Z

By Markus Tietke user 09 Sep 2019 at 10:13 a.m. CDT

Markus Tietke gravatar
Thank you Yuriy, everything is fine now.