Hi I am using 6.1.3 and also get this error
2020-01-14 09:35:28,299 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier could not found as part of the request parameters. Looking at state for the OAuth2/Oidc client> 2020-01-14 09:35:28,299 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated client identifier for this request as [Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]]> 2020-01-14 09:35:28,309 DEBUG [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Delegated authentication client is [#Google2Client# | name: OAuthclient | callbackUrl: https://rrrrrr | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@f06bb36 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@46889b69 | redirectionActionBuilder: org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@2bbe9f46 | credentialsExtractor: org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@4cefed7f | authenticator: org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@760a30df | profileCreator: org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@74dbbea4 | configuration: #OAuth20Configuration# | key: 887838865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com | secret: [protected] | tokenAsHeader: false | responseType: code | scope: profile email | api: com.github.scribejava.apis.GoogleApi20@2b404bd6 | hasBeenCancelledFactory: org.pac4j.oauth.client.Google2Client$$Lambda$1355/0x0000000841157040@18f7dfd4 | profileDefinition: org.pac4j.oauth.profile.google2.Google2ProfileDefinition@3f5c98dd | httpClientConfig: null | |] with service [null]> 2020-01-14 09:35:28,309 DEBUG [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Fetching credentials from delegated client [#Google2Client# | name: OAuthclient | callbackUrl: https://rrrrrrr | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@f06bb36 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@46889b69 | redirectionActionBuilder: org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@2bbe9f46 | credentialsExtractor: org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@4cefed7f | authenticator: org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@760a30df | profileCreator: org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@74dbbea4 | configuration: #OAuth20Configuration# | key: 887838865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com | secret: [protected] | tokenAsHeader: false | responseType: code | scope: profile email | api: com.github.scribejava.apis.GoogleApi20@2b404bd6 | hasBeenCancelledFactory: org.pac4j.oauth.client.Google2Client$$Lambda$1355/0x0000000841157040@18f7dfd4 | profileDefinition: org.pac4j.oauth.profile.google2.Google2ProfileDefinition@3f5c98dd | httpClientConfig: null | |]> 2020-01-14 09:35:28,323 DEBUG [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <generated sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb> 2020-01-14 09:35:28,327 DEBUG [org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor] - <sessionState: null / stateParameter: Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]> 2020-01-14 09:35:28,328 INFO [org.pac4j.oauth.client.Google2Client] - <Failed to retrieve or validate credentials: State parameter mismatch: session expired or possible threat of cross-site request forgery> On Tuesday, January 14, 2020 at 9:38:17 AM UTC+2, craab wrote: > > Found, that actually the OAuth-Webflow breaks all pac4j/openId mechanisms. > Further discussions may take place here: > https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/67b0RCGNwHQ > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/46d2b37f-26fa-4b64-9574-ba06abb7bbe9%40apereo.org.
