Can you post the ldif for the client?

Matt, Along with client ldif ( which Mike asked ), can you please check which Gluu Server version you are using?

Hi thanks so much for your help. We are using Gluu 2.4 (should be the latest we installed it 20 days ago with the newest available build). I'm not sure I understand your question about ldif for the client. Currently I'm just using Gluu's internal LDAP functionality and my user is a gluuPerson. The spring boot client app doesn't have any knowledge of anything about ldap. The only configuration my spring client app has is the following. spring.resources.chain.enabled=true security.oauth2.client.client-id=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D security.oauth2.client.client-secret=superSecret security.oauth2.client.access-token-uri=http://remigluu/oxauth/seam/resource/restv1/oxauth/token security.oauth2.client.user-authorization-uri=http://remigluu/oxauth/seam/resource/restv1/oxauth/authorize security.oauth2.client.token-name=oauth_token security.oauth2.client.grant-type=authorization_code security.oauth2.resource.user-info-uri=http://remigluu/oxauth/seam/resource/restv1/oxauth/userinfo security.oauth2.client.scope[3]={openid,read,write} security.oauth2.client.auto-approve-scopes=.*

Have you guys been able to reproduce this? I just wanted to confirm you weren't waiting on me for any additional info. Thanks

So for one thing I have found that I was using bad syntax to set my scope in my spring boot client webapp. Now that I fixed my spring config I get more information from gluu after authenticating. When I see the allow button it's more informative about what i'm actually allowing. Now it tells me this... mattTestClient is requesting permission to do the following: A persistent but non-identifiable correlation key released by your OpenID Provider. This is what the scope part of my spring config is now and I get better behavior but still not getting redirected back to my client app. security.oauth2.client.scope=openid This is the error I get in the wrapper log after being successfully authenticated... search for SEVERE, you should see it twice. INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,526 TRACE [org.xdi.oxauth.service.AuthenticationService] Logged in successfully! User: org.xdi.oxauth.model.common.User@6885ecda, page: /authorize.xhtml, map: {response_type=code, scope=openid, redirect_uri=https://magellan:8443/login, state=U2hOCW, client_id=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D} INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,532 INFO [org.xdi.oxauth.auth.Authenticator] Authentication success for User: 'mdillenkoffer' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,532 TRACE [org.xdi.oxauth.auth.Authenticator] Authentication successfully for 'mdillenkoffer' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,574 TRACE [org.xdi.oxauth.service.SessionIdService] Found session_id cookie: '46036e1b-5487-49e6-b294-0af91ce773e2' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,579 TRACE [org.xdi.oxauth.service.SessionIdService] Try to get session by id: 46036e1b-5487-49e6-b294-0af91ce773e2 ... INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,580 TRACE [org.xdi.oxauth.service.SessionIdService] Session dn: uniqueIdentifier=46036e1b-5487-49e6-b294-0af91ce773e2,ou=session,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,581 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,581 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,581 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,582 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,582 DEBUG [org.xdi.oxauth.service.RedirectionUriService] Validating redirection URI: clientIdentifier = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D, redirectionUri = https://magellan:8443/login, found = 1 INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,582 DEBUG [org.xdi.oxauth.service.RedirectionUriService] Comparing https://magellan:8443/login == https://magellan:8443/login INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,584 TRACE [xdi.oxauth.authorize.ws.rs.AuthorizeAction] checkPermissionGranted, user = org.xdi.oxauth.model.common.User@77259a66 INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,594 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,594 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,594 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,595 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,597 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,597 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,598 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:40 | 2016-01-11 17:06:40,598 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:42 | 2016-01-11 17:06:42,597 TRACE [org.xdi.oxauth.service.SessionIdService] Try to get session by id: 46036e1b-5487-49e6-b294-0af91ce773e2 ... INFO | jvm 1 | 2016/01/11 17:06:42 | 2016-01-11 17:06:42,598 TRACE [org.xdi.oxauth.service.SessionIdService] Session dn: uniqueIdentifier=46036e1b-5487-49e6-b294-0af91ce773e2,ou=session,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu INFO | jvm 1 | 2016/01/11 17:06:42 | 2016-01-11 17:06:42,600 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D,ou=clients,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu' INFO | jvm 1 | 2016/01/11 17:06:42 | 2016-01-11 17:06:42,600 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D INFO | jvm 1 | 2016/01/11 17:06:42 | Jan 11, 2016 5:06:42 PM com.sun.faces.application.ActionListenerImpl processAction INFO | jvm 1 | 2016/01/11 17:06:42 | SEVERE: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | javax.faces.el.EvaluationException: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:102) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.UICommand.broadcast(UICommand.java:387) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:82) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:100) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:118) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:411) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.Thread.run(Thread.java:745) INFO | jvm 1 | 2016/01/11 17:06:42 | Caused by: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.Arrays$ArrayList.<init>(Arrays.java:2842) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.Arrays.asList(Arrays.java:2828) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.service.ClientAuthorizationsService.add(ClientAuthorizationsService.java:88) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.GeneratedMethodAccessor1882.invoke(Unknown Source) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.service.ClientAuthorizationsService_$$_javassist_seam_44.add(ClientAuthorizationsService_$$_javassist_seam_44.java) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted(AuthorizeAction.java:589) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted(AuthorizeAction.java:581) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.GeneratedMethodAccessor2207.invoke(Unknown Source) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.authorize.ws.rs.AuthorizeAction_$$_javassist_seam_40.permissionGranted(AuthorizeAction_$$_javassist_seam_40.java) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.GeneratedMethodAccessor2206.invoke(Unknown Source) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:335) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:348) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.parser.AstValue.invoke(AstValue.java:96) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:88) INFO | jvm 1 | 2016/01/11 17:06:42 | ... 49 more INFO | jvm 1 | 2016/01/11 17:06:42 | INFO | jvm 1 | 2016/01/11 17:06:42 | Jan 11, 2016 5:06:42 PM com.sun.faces.lifecycle.InvokeApplicationPhase execute INFO | jvm 1 | 2016/01/11 17:06:42 | WARNING: #{authorizeAction.permissionGranted}: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | javax.faces.FacesException: #{authorizeAction.permissionGranted}: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:118) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.UICommand.broadcast(UICommand.java:387) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:82) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:100) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:118) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:411) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.Thread.run(Thread.java:745) INFO | jvm 1 | 2016/01/11 17:06:42 | Caused by: javax.faces.el.EvaluationException: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:102) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) INFO | jvm 1 | 2016/01/11 17:06:42 | ... 48 more INFO | jvm 1 | 2016/01/11 17:06:42 | Caused by: java.lang.NullPointerException INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.Arrays$ArrayList.<init>(Arrays.java:2842) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.util.Arrays.asList(Arrays.java:2828) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.service.ClientAuthorizationsService.add(ClientAuthorizationsService.java:88) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.GeneratedMethodAccessor1882.invoke(Unknown Source) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.service.ClientAuthorizationsService_$$_javassist_seam_44.add(ClientAuthorizationsService_$$_javassist_seam_44.java) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted(AuthorizeAction.java:589) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted(AuthorizeAction.java:581) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.GeneratedMethodAccessor2207.invoke(Unknown Source) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.xdi.oxauth.authorize.ws.rs.AuthorizeAction_$$_javassist_seam_40.permissionGranted(AuthorizeAction_$$_javassist_seam_40.java) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.GeneratedMethodAccessor2206.invoke(Unknown Source) INFO | jvm 1 | 2016/01/11 17:06:42 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/01/11 17:06:42 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:335) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:348) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.parser.AstValue.invoke(AstValue.java:96) INFO | jvm 1 | 2016/01/11 17:06:42 | at org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276) INFO | jvm 1 | 2016/01/11 17:06:42 | at com.sun.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:68) INFO | jvm 1 | 2016/01/11 17:06:42 | at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:88) INFO | jvm 1 | 2016/01/11 17:06:42 | ... 49 more INFO | jvm 1 | 2016/01/11 17:06:42 | INFO | jvm 1 | 2016/01/11 17:06:42 | Jan 11, 2016 5:06:42 PM com.sun.faces.lifecycle.Phase doPhase INFO | jvm 1 | 2016/01/11 17:06:42 | SEVERE: JSF1054: (Phase ID: INVOKE_APPLICATION 5, View ID: /authorize.xhtml) Exception thrown during phase execution: javax.faces.event.PhaseEvent[source=com.sun.faces.lifecycle.LifecycleImpl@2c940fd9] INFO | jvm 1 | 2016/01/11 17:06:45 | 2016-01-11 17:06:45,044 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation INFO | jvm 1 | 2016/01/11 17:06:45 | 2016-01-11 17:06:45,045 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished with result: 'false' INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,034 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Starting update of appliance status INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,038 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter attributes INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: memoryfree INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] memoryfree => 13.01 GB INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: memorysize INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] memorysize => 15.67 GB INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: swapfree INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] swapfree => 16.00 GB INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,823 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: swapsize INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] swapsize => 16.00 GB INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: hostname INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] hostname => remigluu INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: ipaddress INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] ipaddress => 10.3.5.5 INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: load_average INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: bandwidth_usage INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting bandwidth attributes INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: uptime_seconds INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,824 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] uptime_seconds => 2160711 INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,825 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting df attributes INFO | jvm 1 | 2016/01/11 17:07:15 | 2016-01-11 17:07:15,832 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting httpd attributes INFO | jvm 1 | 2016/01/11 17:07:16 | 2016-01-11 17:07:15,970 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Appliance status update finished INFO | jvm 1 | 2016/01/11 17:07:48 | 2016-01-11 17:07:48,044 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation INFO | jvm 1 | 2016/01/11 17:07:48 | 2016-01-11 17:07:48,045 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished with result: 'false' INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,034 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Starting update of appliance status INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,037 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter attributes INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: memoryfree INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] memoryfree => 13.01 GB INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: memorysize INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] memorysize => 15.67 GB INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: swapfree INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] swapfree => 16.00 GB INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: swapsize INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] swapsize => 16.00 GB INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: hostname INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,769 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] hostname => remigluu INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: ipaddress INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] ipaddress => 10.3.5.5 INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: load_average INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: bandwidth_usage INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting bandwidth attributes INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting facter param: uptime_seconds INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] uptime_seconds => 2160772 INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,770 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting df attributes INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,777 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Setting httpd attributes INFO | jvm 1 | 2016/01/11 17:08:16 | 2016-01-11 17:08:16,919 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Appliance status update finished INFO | jvm 1 | 2016/01/11 17:08:51 | 2016-01-11 17:08:51,045 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation INFO | jvm 1 | 2016/01/11 17:08:51 | 2016-01-11 17:08:51,045 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished with result: 'false'

The base of the problem looks to be this 2016-01-11 17:25:19,814 TRACE [org.xdi.oxauth.auth.Authenticator] authenticateBySessionId, sessionId = '46036e1b-5487-49e6-b294-0af91ce773e2', session = 'SessionId, dn='uniqueIdentifier=46036e1b-5487-49e6-b294-0af91ce773e2,ou=session,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu', id='46036e1b-5487-49e6-b294-0af91ce773e2', lastUsedAt=Mon Jan 11 17:25:04 UTC 2016, userDn='inum=@!ACAA.9EF9.9492.D450!0001!9046.A150!0000!2168.4A94,ou=people,o=@!ACAA.9EF9.9492.D450!0001!9046.A150,o=gluu', authenticationTime=Mon Jan 11 17:06:40 UTC 2016, state=authenticated, permissionGranted=null, permissionGrantedMap=null, sessionAttributes={response_type=code, scope=openid, redirect_uri=https://magellan:8443/login, state=0lGAhh, auth_step=1, client_id=@!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D, acr=internal}, persisted=false}', state= 'authenticated' Note that permissionGranted=null and permissionGrantedMap=null seems like the seam lifecycle expects one or both of these to be set but how do I configure Gluu to provide grantedPermission?

as an additional note: I have been able to reproduce the same exact error using only the Authorization Endpoint test client located at. https://remigluu/oxauth-rp I think I must be missing some kind of openID connect configuration on the Gluu side. Authorization Endpoint: http://remigluu/oxauth/seam/resource/restv1/oxauth/authorize ResponseType: CODE, ID_TOKEN Client ID: @!ACAA.9EF9.9492.D450!0001!9046.A150!0008!6FF2.321D Scopes: openid Redirect URI: https://remigluu/oxauth-rp/home.seam Nonce: md Display: POPUP Prompt: LOGIN I get prompted, for username and password it then tells me the testClient wants to access openID, when I click allow I get the big ugly 500 error stack trace. HTTP Status 500 - #{authorizeAction.permissionGranted}: java.lang.NullPointerException type Exception report message #{authorizeAction.permissionGranted}: java.lang.NullPointerException description The server encountered an internal error that prevented it from fulfilling this request. exception javax.servlet.ServletException: #{authorizeAction.permissionGranted}: java.lang.NullPointerException javax.faces.webapp.FacesServlet.service(FacesServlet.java:277) org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) root cause javax.faces.FacesException: #{authorizeAction.permissionGranted}: java.lang.NullPointerException com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:118) javax.faces.component.UICommand.broadcast(UICommand.java:387) javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475) javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756) com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:82) com.sun.faces.lifecycle.Phase.doPhase(Phase.java:100) com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:118) javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) root cause javax.faces.el.EvaluationException: java.lang.NullPointerException javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:102) com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) javax.faces.component.UICommand.broadcast(UICommand.java:387) javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475) javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756) com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:82) com.sun.faces.lifecycle.Phase.doPhase(Phase.java:100) com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:118) javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) root cause java.lang.NullPointerException java.util.Arrays$ArrayList.<init>(Arrays.java:2842) java.util.Arrays.asList(Arrays.java:2828) org.xdi.oxauth.service.ClientAuthorizationsService.add(ClientAuthorizationsService.java:88) sun.reflect.GeneratedMethodAccessor1882.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) java.lang.reflect.Method.invoke(Method.java:606) org.jboss.seam.util.Reflections.invoke(Reflections.java:22) org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185) org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103) org.xdi.oxauth.service.ClientAuthorizationsService_$$_javassist_seam_44.add(ClientAuthorizationsService_$$_javassist_seam_44.java) org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted(AuthorizeAction.java:589) org.xdi.oxauth.authorize.ws.rs.AuthorizeAction.permissionGranted(AuthorizeAction.java:581) sun.reflect.GeneratedMethodAccessor2207.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) java.lang.reflect.Method.invoke(Method.java:606) org.jboss.seam.util.Reflections.invoke(Reflections.java:22) org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185) org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103) org.xdi.oxauth.authorize.ws.rs.AuthorizeAction_$$_javassist_seam_40.permissionGranted(AuthorizeAction_$$_javassist_seam_40.java) sun.reflect.GeneratedMethodAccessor2206.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) java.lang.reflect.Method.invoke(Method.java:606) org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:335) org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:348) org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58) org.jboss.el.parser.AstValue.invoke(AstValue.java:96) org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276) com.sun.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:68) javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:88) com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) javax.faces.component.UICommand.broadcast(UICommand.java:387) javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475) javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756) com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:82) com.sun.faces.lifecycle.Phase.doPhase(Phase.java:100) com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:118) javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) note The full stack trace of the root cause is available in the Apache Tomcat/7.0.55 logs. Apache Tomcat/7.0.55

I think a lot of these errors have been caused by a bad install. I reinstalled gluu and enabled all the features this time and I can no longer reproduce the error above with the test client (https://remigluu/oxauth-rp). So I think I have a good install now but am still working on configuration tweaks to my spring boot app to make it work with OpenID Connect features in Gluu. Gluu must have a slightly different API than Facebook or Github.

So feel free to close this ticket but I have yet to be able to integrate spring boot webapp with Gluu OpenID connect. I'm thinking spring's @EnableOAuth2Sso default behavior isn't compatible with Gluu's openid connect api. If you guys have seen this issue before any tips would be greatly appreciated. On thing I've seen is that spring is not sending a nonce value and even though your documentation says nonce isn't required when I use the test client (https://remigluu/oxauth-rp) I cannot get a successful test unless I populate the nonce value. So that is weird.

I have posted this problem to StackOverflow because it seems like a pretty basic use case I don't understand why it's turning out to be such a challenge. http://stackoverflow.com/questions/34772963/use-openid-connect-gluu-authentication-provider-to-secure-spring-boot-web-app-cl

Matt, I have followed the tutorial, please check the attached code and edit the config file (application.properties) to run it.

There are few points to consider: 1. I am using application.properties instead of yaml config file application.yml to avoid problems with symbols '@' and '.' because oxAuth uses inums for Client IDs, for example: @!90CC.2E38.774C.610B!0001!FD3B.B0A0!0008!72C1.F1C4 2. To set the redirect_uri authorization param you must to set useCurrentUri to false: security.oauth2.client.useCurrentUri: false security.oauth2.client.preEstablishedRedirectUri: https://ce.gluu.info:8443/oxauth-rp/home.seam

Thank you for your response here I did finally get this working the big road block was that I didn't have the gluu cert in my java cacerts keystore. You can actually get this working in spring boot with no code... POM <?xml version="1.0" encoding="UTF-8"?> <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> <modelVersion>4.0.0</modelVersion> <groupId>com.example</groupId> <artifactId>demo</artifactId> <version>0.0.1-SNAPSHOT</version> <packaging>jar</packaging> <name>oauth2clientSimple</name> <description>Demo project for Spring Boot</description> <parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> <version>1.3.1.RELEASE</version> <relativePath/> <!-- lookup parent from repository --> </parent> <properties> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> <java.version>1.8</java.version> </properties> <dependencies> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-web</artifactId> <exclusions> <exclusion> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-logging</artifactId> </exclusion> <exclusion> <groupId>commons-logging</groupId> <artifactId>commons-logging</artifactId> </exclusion> </exclusions> </dependency> <!-- JS UI STUFF --> <dependency> <groupId>org.webjars</groupId> <artifactId>angularjs</artifactId> <version>1.4.3</version> </dependency> <dependency> <groupId>org.webjars</groupId> <artifactId>jquery</artifactId> <version>2.1.1</version> </dependency> <dependency> <groupId>org.webjars</groupId> <artifactId>bootstrap</artifactId> <version>3.2.0</version> </dependency> <dependency> <groupId>org.webjars</groupId> <artifactId>webjars-locator</artifactId> </dependency> <!-- END OF JS UI Stuff --> <!-- Security Stuff Stuff --> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> <exclusions> <exclusion> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-logging</artifactId> </exclusion> <exclusion> <groupId>commons-logging</groupId> <artifactId>commons-logging</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.springframework.security.oauth</groupId> <artifactId>spring-security-oauth2</artifactId> <exclusions> <exclusion> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-logging</artifactId> </exclusion> <exclusion> <groupId>commons-logging</groupId> <artifactId>commons-logging</artifactId> </exclusion> </exclusions> </dependency> <!-- End of Security Stuff Stuff --> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-test</artifactId> <scope>test</scope> <exclusions> <exclusion> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-logging</artifactId> </exclusion> <exclusion> <groupId>commons-logging</groupId> <artifactId>commons-logging</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-log4j2</artifactId> </dependency> </dependencies> <build> <plugins> <plugin> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-maven-plugin</artifactId> </plugin> </plugins> </build> </project> Application Class @SpringBootApplication @EnableOAuth2Sso public class Oauth2clientSimpleApplication extends WebSecurityConfigurerAdapter { public static void main(String[] args) { SpringApplication.run(Oauth2clientSimpleApplication.class, args); } } application.properties spring.resources.chain.enabled=true security.oauth2.client.client-id=@!B1E3.D31C.D842.77DE!0001!7E31.E4DC!0008!26B8.0707 security.oauth2.client.client-secret=superSecret security.oauth2.client.access-token-uri=https://remigluu/oxauth/seam/resource/restv1/oxauth/token security.oauth2.client.user-authorization-uri=https://remigluu/oxauth/seam/resource/restv1/oxauth/authorize security.oauth2.client.authentication-scheme=form security.oauth2.client.client-authentication-scheme=form security.oauth2.resource.user-info-uri=https://remigluu/oxauth/seam/resource/restv1/oxauth/userinfo security.oauth2.client.scope=openid profile #trace=true #logging.level.org.springframework=TRACE server.port=8443 server.ssl.key-store=classpath:keystore server.ssl.key-store-password=changeit With this minimal config all resources will be secured by spring security which redirects you to Gluu to authenticate. Redirect url in Gluu is configured to be https://blahServer:8443/login which Spring security is listening to for the authorization code.