Hi, It used to work in version 4.2.4, I just tested it with the following demo: https://github.com/leleuj/cas-pac4j-oauth-demo
Your URL is with oath2 instead of oauth2: a typo? Or the mapping in the web.xml is now mandatory: https://github.com/apereo/cas/commit/433a5b61afbcbd538a295f378a8ee396acedeab1 If you confirm the issue, I'll upgrade to 4.2.6 and investigate. Thanks. Best regards, Jérôme 2016-10-09 11:31 GMT+02:00 Luo <[email protected]>: > CAS 4.2.6, /oauth2.0/authorize always redirect to login page. > https://demo.ssoserver.com:8443/cas/oath2.0/authorize? > client_id=testclientid&redirect_uri=http://demo. > ssoserver.com:8080&response_type=code > > 2016-10-09 17:28:25,615 INFO [org.jasig.cas.web.flow.InitialFlowSetupAction] > - <Setting path for cookies for warn cookie generator to: /cas/ > > 2016-10-09 17:28:25,615 INFO [org.jasig.cas.web.flow.InitialFlowSetupAction] > - <Setting path for cookies for TGC cookie generator to: /cas/ > > 2016-10-09 17:28:25,902 DEBUG > [org.jasig.cas.web.support.DefaultCasCookieValueManager] > - <Decoded cookie value is [null]> > 2016-10-09 17:28:25,902 DEBUG > [org.jasig.cas.web.support.DefaultCasCookieValueManager] > - <Retrieved decoded cookie value is blank. Failed to decode cookie [TGC]> > 2016-10-09 17:28:25,903 DEBUG > [org.jasig.cas.web.support.DefaultArgumentExtractor] > - <No service could be extracted based on the given request> > 2016-10-09 17:28:25,903 DEBUG > [org.jasig.cas.web.support.DefaultArgumentExtractor] > - <Extractor did not generate service.> > 2016-10-09 17:28:26,075 DEBUG [org.jasig.cas.services.web. > RegisteredServiceThemeBasedViewResolver] - <View resolved: > /WEB-INF/view/jsp/default/ui/casLoginView.jsp> > 2016-10-09 17:28:26,291 DEBUG > [org.jasig.cas.web.view.CasReloadableMessageBundle] > - <No properties file found for [classpath:custom_messages_en] - neither > plain properties nor XML> > 2016-10-09 17:28:26,292 DEBUG > [org.jasig.cas.web.view.CasReloadableMessageBundle] > - <No properties file found for [classpath:custom_messages] - neither plain > properties nor XML> > 2016-10-09 17:28:26,294 DEBUG > [org.jasig.cas.web.view.CasReloadableMessageBundle] > - <No properties file found for [classpath:messages_en] - neither plain > properties nor XML> > 2016-10-09 17:28:26,295 DEBUG > [org.jasig.cas.web.view.CasReloadableMessageBundle] > - <Loading properties [messages.properties] with encoding 'UTF-8'> > 2016-10-09 17:28:28,257 DEBUG [org.jasig.cas.util.CasSpringBeanJobFactory] > - <Created job org.jasig.cas.services.DefaultServicesManagerImpl$ > ServiceRegistryReloaderJob@4d004aee for bundle org.quartz.spi. > TriggerFiredBundle@584b0ec4> > 2016-10-09 17:28:28,271 DEBUG [org.jasig.cas.util.CasSpringBeanJobFactory] > - <Autowired job per the application context> > 2016-10-09 17:28:28,274 INFO > [org.jasig.cas.services.DefaultServicesManagerImpl] > - <Reloading registered services.> > 2016-10-09 17:28:28,277 DEBUG > [org.jasig.cas.services.DefaultServicesManagerImpl] > - <Adding registered service ^http://demo.ssoserver.com:8080> > 2016-10-09 17:28:28,277 DEBUG > [org.jasig.cas.services.DefaultServicesManagerImpl] > - <Adding registered service https://demo.ssoserver:8443/ > cas/oauth2.0/callbackAuthorize> > 2016-10-09 17:28:28,277 DEBUG > [org.jasig.cas.services.DefaultServicesManagerImpl] > - <Adding registered service ^(https|imaps)://.*> > 2016-10-09 17:28:28,277 DEBUG > [org.jasig.cas.services.DefaultServicesManagerImpl] > - <Adding registered service ^https://www.apereo.org> > 2016-10-09 17:28:28,277 INFO > [org.jasig.cas.services.DefaultServicesManagerImpl] > - <Loaded 4 services from JsonServiceRegistryDao.> > 2016-10-09 17:28:35,087 DEBUG [org.jasig.cas.util.WebflowCipherExecutor] > - <Successfully decoded value. Result in Base64-encoding is > [jLwRLbToYKjkS5e48U/2+bBCuN9OXy0z4bBkPTZfRjYL3Ubf5hA > T88vD5EvOLqmyuNMw8a8EXe0JCp0fPZJdrYRcioNequsEfDnpcFRapKVDm3n > N+SiKxS+JE/l+Lqj/n7b19ZrIHxjbUom/WGGpTJcItnnNreJqnRAARMUiFZYwD4 > 9rGSVaCnm4xfxqkbWHBmfbrIM9/xPJVSbklgbEa3EOnXBg3+MIu/e9Ooo/ > VrOe0VsyOazcLrlnme3hNHf13uHSyQ1D2rbyolt8EiTbHwngLjg/X5s5VFYOvshDP/ > 3mdIjBF1abjom1xJ7oSaz1oZOzJhJAkgEXlaQWnO7k2bUBiWOotFmn5iwy6m > FbKupwidCXfo7hoBA02Kt3OEbhDjSayrD8Bop8trAwJ2KCLX2XS9qRaIQUc3 > uTedGB3unuhB0DGeGN13FkXnB6ID4GZTzfVCiNwt43m+HLCE+ > ZODbOCEb15JsvO6G4RTNLLBGwJzbqffZ14UgmOn/iHXprHLOx7QDHfLOWWbvEpztdXH13k > bpyztKZ/n6jOkpmXebEY+TAt1RrKZzzIblf6HdJqwd8nrvM6VP5JNurjfwhgp8EL0+XD7z+ > xRgVhbJfInyjuFmQgVmdIYwrzKOZu60kyG54cYTJ3BrGguUAhEmO/ > SVloXENQ53fdWaNjIKQ09spOxHNQT1DS8rjutc2jgFCYoBtX03thienPWahb > 52m93QMqT21uDYo28TvSjH6BTyReMdJPiDNLnxT7LFezHBaXUc+x4788C+P04dOGAed1+ > KHMeU63hL0iVVPZ2f1RIJwlXfGktoVYRX5u66ivbUoyleQqwVPPcJXzieCQw2ozU+ > 8hXd2MmTGhducQziXOTBicrNBvrTeBARkRFPVKeVHmVQGGxvYJhHFM7oTEO9 > ezpSvGuFV/m/hxdf4bvN7sdo=]> > 2016-10-09 17:28:35,091 DEBUG [org.jasig.cas.util.RegexUtils] - <Pattern > https://demo.ssoserver:8443/cas/oauth2.0/callbackAuthorize is a valid > regex.> > 2016-10-09 17:28:35,092 DEBUG [org.jasig.cas.util.RegexUtils] - <Pattern ^ > http://demo.ssoserver.com:8080 is a valid regex.> > 2016-10-09 17:28:35,092 DEBUG [org.jasig.cas.util.RegexUtils] - <Pattern ^ > https://www.apereo.org is a valid regex.> > 2016-10-09 17:28:35,092 DEBUG [org.jasig.cas.util.RegexUtils] - <Pattern > ^(https|imaps)://.* is a valid regex.> > 2016-10-09 17:28:35,092 DEBUG [org.jasig.cas.services.web. > RegisteredServiceThemeBasedViewResolver] - <View resolved: > /WEB-INF/view/jsp/default/ui/casLoginView.jsp> > 2016-10-09 17:28:35,162 DEBUG [org.jasig.cas.util.CasSpringBeanJobFactory] > - <Created job org.jasig.cas.ticket.registry. > TicketRegistryCleaner@5c237802 for bundle org.quartz.spi. > TriggerFiredBundle@1a8b3f3b> > 2016-10-09 17:28:35,178 DEBUG [org.jasig.cas.util.CasSpringBeanJobFactory] > - <Autowired job per the application context> > 2016-10-09 17:28:35,230 INFO > [org.jasig.cas.ticket.registry.TicketRegistryCleaner] > - <Beginning ticket cleanup...> > 2016-10-09 17:28:35,231 DEBUG > [org.jasig.cas.ticket.registry.TicketRegistryCleaner] > - <Cleaning up tickets from an instance of org.jasig.cas.ticket.registry. > DefaultTicketRegistry@2d566c97> > 2016-10-09 17:28:35,233 INFO > [org.jasig.cas.ticket.registry.TicketRegistryCleaner] > - <0 expired tickets found and removed.> > 2016-10-09 17:28:35,237 INFO [org.jasig.cas.authentication. > PolicyBasedAuthenticationManager] - <AcceptUsersAuthenticationHandler > successfully authenticated casuser> > 2016-10-09 17:28:35,238 DEBUG [org.jasig.cas.authentication.principal. > PersonDirectoryPrincipalResolver] - <Attempting to resolve a principal...> > 2016-10-09 17:28:35,238 DEBUG [org.jasig.cas.authentication.principal. > PersonDirectoryPrincipalResolver] - <Creating SimplePrincipal for > [casuser]> > 2016-10-09 17:28:35,239 DEBUG [org.jasig.cas.authentication.principal. > PersonDirectoryPrincipalResolver] - <Retrieved [4] attribute(s) from the > repository> > 2016-10-09 17:28:35,239 DEBUG [org.jasig.cas.authentication. > PolicyBasedAuthenticationManager] - <org.jasig.cas.authentication. > principal.PersonDirectoryPrincipalResolver@59f13915 resolved casuser from > casuser> > 2016-10-09 17:28:35,239 DEBUG [org.jasig.cas.authentication. > PolicyBasedAuthenticationManager] - <Final principal resolved for this > authentication event is casuser> > 2016-10-09 17:28:35,241 INFO [org.jasig.cas.authentication. > PolicyBasedAuthenticationManager] - <Authenticated casuser with > credentials [casuser].> > 2016-10-09 17:28:35,242 DEBUG [org.jasig.cas.authentication. > PolicyBasedAuthenticationManager] - <Attribute map for casuser: {uid=uid, > eduPersonAffiliation=eduPersonAffiliation, memberOf=[faculty, staff, > org], groupMembership=groupMembership}> > 2016-10-09 17:28:35,245 DEBUG [org.jasig.cas.audit.spi. > AssertionAsReturnValuePrincipalResolver] - <Trying to see if target's > return value is instance of [Assertion]...> > 2016-10-09 17:28:35,246 DEBUG [org.jasig.cas.audit.spi. > AssertionAsReturnValuePrincipalResolver] - <Resolving principal from the > delegate principal resolver: [org.jasig.cas.audit.spi. > TicketOrCredentialPrincipalResolver@5054f0a7]...> > 2016-10-09 17:28:35,248 DEBUG [org.jasig.cas.audit.spi. > TicketOrCredentialPrincipalResolver] - <Resolving argument > [AuthenticationTransaction] for audit> > 2016-10-09 17:28:35,248 DEBUG [org.jasig.cas.audit.spi. > TicketOrCredentialPrincipalResolver] - <Resolving argument > [UsernamePasswordCredential] for audit> > 2016-10-09 17:28:35,252 INFO > [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] > - <Sun Oct 09 17:28:35 CST 2016|CAS|Supplied credentials: > [casuser]|AUTHENTICATION_SUCCESS|casuser|127.0.0.1|127.0.0.1> > 2016-10-09 17:28:35,286 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationTransactionManager] - <Successful authentication; > Collecting authentication result [org.jasig.cas.authentication. > ImmutableAuthentication@6c9935b8]> > 2016-10-09 17:28:35,303 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationTransactionManager] - <Transaction ignored since > there are no credentials to authenticate> > 2016-10-09 17:28:35,304 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Collecting authentication history > based on [1] authentication events> > 2016-10-09 17:28:35,304 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Evaluating authentication > principal [casuser] for inclusion in context> > 2016-10-09 17:28:35,304 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Collected principal attributes > [{uid=uid, memberOf=[faculty, staff, org], groupMembership=groupMembership, > eduPersonAffiliation=eduPersonAffiliation}] for inclusion in context for > principal [casuser]> > 2016-10-09 17:28:35,305 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Collected single authentication > attribute [authenticationMethod] -> [AcceptUsersAuthenticationHandler]> > 2016-10-09 17:28:35,305 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Collected single authentication > attribute [successfulAuthenticationHandlers] -> [[ > AcceptUsersAuthenticationHandler]]> > 2016-10-09 17:28:35,305 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Finalized authentication > attributes [{authenticationMethod=AcceptUsersAuthenticationHandler, > successfulAuthenticationHandlers=[AcceptUsersAuthenticationHandler]}] for > inclusion in authentication context> > 2016-10-09 17:28:35,310 DEBUG [org.jasig.cas.authentication. > DefaultPrincipalElectionStrategy] - <Nominated [casuser] as the primary > principal> > 2016-10-09 17:28:35,310 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Determined primary authentication > principal to be [casuser]> > 2016-10-09 17:28:35,310 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Collected authentication > attributes for this context are [{authenticationMethod= > AcceptUsersAuthenticationHandler, successfulAuthenticationHandlers=[ > AcceptUsersAuthenticationHandler]}]> > 2016-10-09 17:28:35,311 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Authentication context commenced > at [2016-10-09T17:28:35.311+08:00]> > 2016-10-09 17:28:35,311 DEBUG [org.jasig.cas.authentication. > DefaultAuthenticationContextBuilder] - <Building an authentication > context for authentication org.jasig.cas.authentication. > ImmutableAuthentication@693d9bfb and service null> > 2016-10-09 17:28:35,336 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] > - <Added ticket [TGT-********************************************** > 04LVWTZIYq-demo.ssoserver.com] to registry.> > 2016-10-09 17:28:35,357 DEBUG [org.jasig.cas. > CentralAuthenticationServiceImpl] - <Publishing > org.jasig.cas.support.events.CasTicketGrantingTicketCreatedEvent@2385b95a[ > ticketGrantingTicket=TGT-********************************************** > 04LVWTZIYq-demo.ssoserver.com]> > 2016-10-09 17:28:35,357 DEBUG [org.jasig.cas.audit.spi. > AssertionAsReturnValuePrincipalResolver] - <Trying to see if target's > return value is instance of [Assertion]...> > 2016-10-09 17:28:35,358 DEBUG [org.jasig.cas.audit.spi. > AssertionAsReturnValuePrincipalResolver] - <Resolving principal from the > delegate principal resolver: [org.jasig.cas.audit.spi. > TicketOrCredentialPrincipalResolver@5054f0a7]...> > 2016-10-09 17:28:35,358 DEBUG [org.jasig.cas.audit.spi. > TicketOrCredentialPrincipalResolver] - <Resolving argument > [DefaultAuthenticationContext] for audit> > 2016-10-09 17:28:35,362 DEBUG [org.jasig.cas.audit.spi. > AssertionAsReturnValuePrincipalResolver] - <Meaningful principal id could > not be resolved by [org.jasig.cas.audit.spi.AssertionAsReturnValuePrincipa > lResolver@5ad01546]. Returning [audit:unknown]...> > 2016-10-09 17:28:35,363 INFO > [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] > - <Sun Oct 09 17:28:35 CST 2016|CAS|TGT-***************** > *****************************04LVWTZIYq-demo.ssoserver.com| > TICKET_GRANTING_TICKET_CREATED|audit:unknown|127.0.0.1|127.0.0.1> > 2016-10-09 17:28:35,364 DEBUG [org.jasig.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > 2016-10-09 17:28:35,364 DEBUG [org.jasig.cas.web. > WarningCookieRetrievingCookieGenerator] - <Removed cookie with name > [CASPRIVACY]> > 2016-10-09 17:28:35,365 DEBUG [org.jasig.cas.web.flow. > SendTicketGrantingTicketAction] - <Setting TGC for current session.> > 2016-10-09 17:28:35,366 DEBUG > [org.jasig.cas.web.support.DefaultCasCookieValueManager] > - <Encoding cookie value [TGT-************************* > *********************[email protected]@Mozilla/5.0 > (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0]> > 2016-10-09 17:28:35,370 DEBUG [org.jasig.cas.util.TGCCipherExecutor] - > <Encrypting via [A128CBC-HS256]> > 2016-10-09 17:28:35,377 DEBUG [org.jasig.cas.web.support. > TGCCookieRetrievingCookieGenerator] - <Added cookie with name [TGC] and > value [eyJhbGciOiJIUzUxMiJ9.WlhsS2FHSkhZMmxQYVVwcllWaEphVX > hEU214aWJVMXBUMmxLUWsxVVNUUlJNRXBFVEZWb1ZFMXFWVEpKYmpBdUxqVl > NkM3BCYjIwek5GSTBSa1Z6V0VOVWVraEZjRkV1WkVNeWJ6SnVPVTl6YW5Oel > NYZFBSMkZKU0ZkUlYwOXhiM05OYzNkWFp6Qk1OMFJ3TTB4R1NtMWxlV2hxVm > 5OVlgwTjNNMnRyZDJGMlQxTnFjWHBJUkZWTmVrb3hSRWgxUjBJMExXSnRYMW > hUVXpKNFJXSjBlbGhJUjBVek56VkNUbk5sZFVoMVVYSjNNekp0U3paZk1GWX > hibDkxTVdaS2VHOWxVMmRGY0hKTk9FZGlNRTVPYjJoaFJVYzFlVXAwUkRVel > dYa3hWSEpsWTJKdFlrcHpXVmRwWTFGdWJXdFFkRzk1UjFKaWNtWmFlbFJwU2 > toV2IwWkRXVmd4T1RWMWVsVnZjVGx4ZDJvelRYZDRiRE5MU2s5RGQxbEZRUz > VmTFRSNGNsUmhOa2M0UmtONlowcEZkSFIwVHpobg.a2I3vdh_ > 53wAe9kfy0kwtz4j3tDZjlo56iYjBP3K2wDHfmTVbTW1P3pyykfA52XCBVQN > WAaayZgq5fLEdkrWdA]> > 2016-10-09 17:28:35,381 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] > - <Attempting to retrieve ticket [TGT-************************* > *********************04LVWTZIYq-demo.ssoserver.com]> > 2016-10-09 17:28:35,383 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] > - <Ticket [TGT-**********************************************04LVWTZIY > q-demo.ssoserver.com] found in registry.> > 2016-10-09 17:28:35,387 DEBUG [org.jasig.cas.services.web. > RegisteredServiceThemeBasedViewResolver] - <View resolved: > /WEB-INF/view/jsp/default/ui/casGenericSuccessView.jsp> > > -- > CAS gitter chatroom: https://gitter.im/apereo/cas > CAS mailing list guidelines: https://apereo.github.io/cas/ > Mailing-Lists.html > CAS documentation website: https://apereo.github.io/cas > CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > . > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/d93f2d76-be1c-494b-a7b7- > e2a0156002b4%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/d93f2d76-be1c-494b-a7b7-e2a0156002b4%40apereo.org?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/a/apereo.org/d/optout. > -- CAS gitter chatroom: https://gitter.im/apereo/cas CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html CAS documentation website: https://apereo.github.io/cas CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAP279LyK%3DAyqudpFTVuns38P%2BRQFekkgw%2BrPvnVfH9jN%2BDn%2BMA%40mail.gmail.com. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
