Gluu authorization code flow

By: Mirko Teodorovic user 14 Apr 2019 at 5:37 p.m. CDT

2 Responses
Mirko Teodorovic gravatar
I'm trying to configure an application to authenticate against gluu. When trying to access it redirects me to gluu login page and after I enter credentials gluu redirects to registered callback in redirec_uri. Then I have following lines in my application code, when application tries to get the access token and fails am I' missing some parameter, user is suppose to be properly authenticated. ``` 22:33:04.774 [qtp913190639-15] ERROR o.e.k.s.p.AbstractSingleSignOnService - PARAM:grant_type:authorization_code 22:33:04.774 [qtp913190639-15] ERROR o.e.k.s.p.AbstractSingleSignOnService - PARAM:code:c3074557-f6e7-4692-b4f4-7676e59a248b 22:33:04.774 [qtp913190639-15] ERROR o.e.k.s.p.AbstractSingleSignOnService - PARAM:client_id:@!1DA9.BCB4.7B32.B721!0001!022F.4EED!0008!59B0.990E.3051.CA54 22:33:04.774 [qtp913190639-15] ERROR o.e.k.s.p.AbstractSingleSignOnService - PARAM:client_secret:ChsQTJUnCU7SJtBLFYHpvnio 22:33:04.774 [qtp913190639-15] ERROR o.e.k.s.p.AbstractSingleSignOnService - PARAM:redirect_uri:http://portal.solidsense.tk:8080/sso/callback 693391 [qtp913190639-15] WARN o.eclipse.jetty.server.HttpChannel - /sso/callback java.io.IOException: Server returned HTTP response code: 401 for URL: https://gluu-auth.tk/oxauth/restv1/token ```
Ubuntu 16.04
closed

Answers

By Mirko Teodorovic user 15 Apr 2019 at 6:07 a.m. CDT

Copy
Mirko Teodorovic gravatar
so application (eclipse/kapua) is sending ``` grant_type:authorization_code code:c3074557-f6e7-4692-b4f4-7676e59a248b client_id:@!1DA9.BCB4.7B32.B721!0001!022F.4EED!0008!59B0.990E.3051.CA54 redirect_uri:http://portal.solidsense.tk:8080/sso/callback ``` this is in the apache log ( so request came ) ``` gluu-auth.tk:443 138.68.107.142 - - [15/Apr/2019:11:06:01 +0000] "POST /oxauth/restv1/token HTTP/1.1" 401 2416 "-" "Java/1.8.0_201" ``` however there is nothing in oxauth log how can I debug this

By Mirko Teodorovic user 15 Apr 2019 at 7:33 a.m. CDT

Copy
Mirko Teodorovic gravatar
resolved, changing token endpoint auth to client_secret_post

Post an answer