No
My dependancies:
implementation project(":core:cas-server-core")
implementation project(":core:cas-server-core-audit")
implementation project(":core:cas-server-core-authentication")
implementation project(":core:cas-server-core-configuration")
implementation project(":core:cas-server-core-cookie")
implementation project(":core:cas-server-core-logout")
implementation project(":core:cas-server-core-logging")
implementation project(":core:cas-server-core-services")
implementation project(":core:cas-server-core-tickets")
implementation project(":core:cas-server-core-util")
implementation project(":core:cas-server-core-validation")
implementation project(":core:cas-server-core-web")
implementation project(":support:cas-server-support-actions")
implementation project(":support:cas-server-support-person-directory")
implementation project(":support:cas-server-support-themes")
implementation project(":support:cas-server-support-validation")
implementation project(":support:cas-server-support-pm-webflow")
implementation project(":webapp:cas-server-webapp-config")
implementation project(":webapp:cas-server-webapp-init")
implementation project(":webapp:cas-server-webapp-resources")
implementation
project(":support:cas-server-support-jpa-service-registry")
implementation project(":support:cas-server-support-jdbc-drivers")
implementation project(":support:cas-server-support-ldap")
implementation project(":support:cas-server-support-saml")
implementation project(":core:cas-server-core-rest")
implementation project(":support:cas-server-support-oidc")
implementation project(":support:cas-server-support-surrogate-webflow")
implementation
project(":support:cas-server-support-surrogate-authentication-ldap")
implementation project(":support:cas-server-support-gauth")
implementation project(":support:cas-server-support-gauth-jpa")
implementation project(":support:cas-server-support-trusted-mfa")
implementation project(":support:cas-server-support-trusted-mfa-jdbc")
implementation project(":support:cas-server-support-audit-jdbc")
implementation project(":support:cas-server-support-throttle-jdbc")
implementation project(":support:cas-server-support-sentry")
implementation
project(":support:cas-server-support-ehcache-ticket-registry")
implementation project(":support:cas-server-support-discovery-profile")
implementation project(":support:cas-server-support-aup-webflow")
implementation project(":support:cas-server-support-aup-ldap")
implementation project(":support:cas-server-support-pm-ldap")
implementation project(":support:cas-server-support-pac4j-webflow")
More detail log with DistributedJ2ESessionStore trace:
2020-01-14 10:34:29,815 TRACE
[org.apereo.cas.support.oauth.services.OAuth20AuthenticationServiceSelectionStrategy]
- <Authentication request is not identified as an OAuth request>
2020-01-14 10:34:29,816 DEBUG
[org.apereo.cas.web.DelegatedClientWebflowManager] - <Storing delegated
authentication request ticket [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] for
service [null] with properties [{theme=, targetService=null, method=,
locale=, service=null}]>
2020-01-14 10:34:29,816 TRACE [org.apereo.cas.ticket.DefaultTicketCatalog]
- <Locating ticket definition for ticket
[TransientSessionTicketImpl(super=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9,
service=null, properties={theme=, targetService=null, method=, locale=,
service=null})]>
2020-01-14 10:34:29,817 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:29,817 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:29,817 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding ticket
[TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] to the cache
[transientSessionTicketsCache] to live [300] seconds and stay idle for
[300] seconds>
2020-01-14 10:34:29,817 DEBUG
[org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder] - <save
sessionState: TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9>
2020-01-14 10:34:29,819 DEBUG
[org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder] -
<authorizationUrl:
https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=887558865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com&redirect_uri=https%3A%2F%2Frrrrrr%2Fcas%2Flogin%3Fclient_name%3DOAuthclient&scope=profile%20email&state=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9>
2020-01-14 10:34:29,819 DEBUG
[org.apereo.cas.web.DelegatedClientNavigationController] - <Determined
final redirect action for client [#Google2Client# | name: OAuthclient |
callbackUrl: https://rrrrr | callbackUrlResolver:
org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@16b02425 |
ajaxRequestResolver:
org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@ea9f5d0 |
redirectionActionBuilder:
org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@77ac0f67 |
credentialsExtractor:
org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@65737eda
| authenticator:
org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@7275ff5d |
profileCreator:
org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@333383b6 |
configuration: #OAuth20Configuration# | key:
778738865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com |
secret: [protected] | tokenAsHeader: false | responseType: code | scope:
profile email | api: com.github.scribejava.apis.GoogleApi20@24736580 |
hasBeenCancelledFactory:
org.pac4j.oauth.client.Google2Client$$Lambda$1370/0x00000008411c2c40@5a885a7a
| profileDefinition:
org.pac4j.oauth.profile.google2.Google2ProfileDefinition@7dad961 |
httpClientConfig: null | |] as [#HttpAction# | code: 302 |]>
2020-01-14 10:34:29,820 DEBUG
[org.apereo.cas.web.DelegatedClientNavigationController] - <Redirecting
client [OAuthclient] to
[https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=778738865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com&redirect_uri=https%3A%2F%2Frrrrrrr%2Fcas%2Flogin%3Fclient_name%3DOAuthclient&scope=profile%20email&state=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]
based on identifier [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]>
2020-01-14 10:34:34,145 TRACE
[org.apereo.cas.web.support.gen.TicketGrantingCookieRetrievingCookieGenerator]
- <Removed cookie 'TGC'>
2020-01-14 10:34:34,146 TRACE
[org.apereo.cas.support.oauth.services.OAuth20AuthenticationServiceSelectionStrategy]
- <Authentication request is not identified as an OAuth request>
2020-01-14 10:34:34,146 DEBUG
[org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier
could not found as part of the request parameters. Looking at state for the
OAuth2/Oidc client>
2020-01-14 10:34:34,146 DEBUG
[org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated
client identifier for this request as
[Optional[TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]]>
2020-01-14 10:34:34,146 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,146 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,147 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,147 DEBUG
[org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated
client identifier as [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]>
2020-01-14 10:34:34,147 TRACE
[org.apereo.cas.web.DelegatedClientWebflowManager] - <Restoring requested
service [null] back in the authentication flow>
2020-01-14 10:34:34,147 DEBUG
[org.apereo.cas.web.DelegatedClientWebflowManager] - <Removing delegated
client identifier [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] from registry>
2020-01-14 10:34:34,147 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,147 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,147 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,147 DEBUG
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Removing ticket
[TransientSessionTicketImpl(super=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9,
service=null, properties={theme=, targetService=null, method=, locale=,
service=null})] from the registry.>
2020-01-14 10:34:34,147 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,147 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,147 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,147 TRACE [org.apereo.cas.ticket.DefaultTicketCatalog]
- <Locating ticket definition for ticket
[TransientSessionTicketImpl(super=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9,
service=null, properties={theme=, targetService=null, method=, locale=,
service=null})]>
2020-01-14 10:34:34,147 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,148 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,148 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket
[TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] is removed>
2020-01-14 10:34:34,148 TRACE
[org.apereo.cas.support.oauth.services.OAuth20AuthenticationServiceSelectionStrategy]
- <Authentication request is not identified as an OAuth request>
2020-01-14 10:34:34,148 DEBUG
[org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Delegated
authentication client is [#Google2Client# | name: OAuthclient |
callbackUrl: https://rrrr | callbackUrlResolver:
org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@16b02425 |
ajaxRequestResolver:
org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@ea9f5d0 |
redirectionActionBuilder:
org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@77ac0f67 |
credentialsExtractor:
org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@65737eda
| authenticator:
org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@7275ff5d |
profileCreator:
org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@333383b6 |
configuration: #OAuth20Configuration# | key:
877865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com |
secret: [protected] | tokenAsHeader: false | responseType: code | scope:
profile email | api: com.github.scribejava.apis.GoogleApi20@24736580 |
hasBeenCancelledFactory:
org.pac4j.oauth.client.Google2Client$$Lambda$1370/0x00000008411c2c40@5a885a7a
| profileDefinition:
org.pac4j.oauth.profile.google2.Google2ProfileDefinition@7dad961 |
httpClientConfig: null | |] with service [null]>
2020-01-14 10:34:34,148 DEBUG
[org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Fetching
credentials from delegated client [#Google2Client# | name: OAuthclient |
callbackUrl: https://rrrrrr | callbackUrlResolver:
org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@16b02425 |
ajaxRequestResolver:
org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@ea9f5d0 |
redirectionActionBuilder:
org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@77ac0f67 |
credentialsExtractor:
org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@65737eda
| authenticator:
org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@7275ff5d |
profileCreator:
org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@333383b6 |
configuration: #OAuth20Configuration# | key:
8444438865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com |
secret: [protected] | tokenAsHeader: false | responseType: code | scope:
profile email | api: com.github.scribejava.apis.GoogleApi20@24736580 |
hasBeenCancelledFactory:
org.pac4j.oauth.client.Google2Client$$Lambda$1370/0x00000008411c2c40@5a885a7a
| profileDefinition:
org.pac4j.oauth.profile.google2.Google2ProfileDefinition@7dad961 |
httpClientConfig: null | |]>
2020-01-14 10:34:34,148 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <getting
key: OAuthclient$stateSessionParameter>
2020-01-14 10:34:34,148 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <retrieved
sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
2020-01-14 10:34:34,148 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <fetching
ticket: TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
2020-01-14 10:34:34,148 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,148 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <setting
key: OAuthclient$stateSessionParameter>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <retrieved
sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <retrieved
sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <fetching
ticket: TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,149 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,149 TRACE [org.apereo.cas.ticket.DefaultTicketCatalog]
- <Locating ticket definition for ticket
[TransientSessionTicketImpl(super=TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb,
service=null, properties={OAuthclient$attemptedAuthentication=true})]>
2020-01-14 10:34:34,149 TRACE
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
encryption is not enabled. Falling back to default behavior>
2020-01-14 10:34:34,149 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
2020-01-14 10:34:34,150 DEBUG
[org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding ticket
[TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb] to the cache
[transientSessionTicketsCache] to live [300] seconds and stay idle for
[300] seconds>
2020-01-14 10:34:34,150 TRACE
[org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <updated
ticket: TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
2020-01-14 10:34:34,150 DEBUG
[org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor] -
<sessionState: null / stateParameter:
Optional[TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]>
2020-01-14 10:34:34,150 INFO [org.pac4j.oauth.client.Google2Client] -
<Failed to retrieve or validate credentials: State parameter mismatch:
session expired or possible threat of cross-site request forgery>
On Tuesday, January 14, 2020 at 10:28:48 AM UTC+2, craab wrote:
>
> Are you using
> "org.apereo.cas:cas-server-support-oauth-webflow:${project.'cas.version'}" ?
>
> Am Dienstag, 14. Januar 2020 09:06:22 UTC+1 schrieb Wimpie De Klerk:
>>
>> Hi
>>
>> I am using 6.1.3 and also get this error
>>
>> 2020-01-14 09:35:28,299 DEBUG
>> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier
>> could not found as part of the request parameters. Looking at state for the
>> OAuth2/Oidc client>
>> 2020-01-14 09:35:28,299 DEBUG
>> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated
>> client identifier for this request as
>> [Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]]>
>> 2020-01-14 09:35:28,309 DEBUG
>> [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Delegated
>> authentication client is [#Google2Client# | name: OAuthclient |
>> callbackUrl: https://rrrrrr | callbackUrlResolver:
>> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@f06bb36 |
>> ajaxRequestResolver:
>> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@46889b69 |
>> redirectionActionBuilder:
>> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@2bbe9f46 |
>> credentialsExtractor:
>> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@4cefed7f
>> | authenticator:
>> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@760a30df |
>> profileCreator:
>> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@74dbbea4 |
>> configuration: #OAuth20Configuration# | key:
>> 887838865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com
>> | secret: [protected] | tokenAsHeader: false | responseType: code | scope:
>> profile email | api: com.github.scribejava.apis.GoogleApi20@2b404bd6 |
>> hasBeenCancelledFactory:
>> org.pac4j.oauth.client.Google2Client$$Lambda$1355/0x0000000841157040@18f7dfd4
>>
>> | profileDefinition:
>> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@3f5c98dd |
>> httpClientConfig: null | |] with service [null]>
>> 2020-01-14 09:35:28,309 DEBUG
>> [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Fetching
>> credentials from delegated client [#Google2Client# | name: OAuthclient |
>> callbackUrl: https://rrrrrrr | callbackUrlResolver:
>> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@f06bb36 |
>> ajaxRequestResolver:
>> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@46889b69 |
>> redirectionActionBuilder:
>> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@2bbe9f46 |
>> credentialsExtractor:
>> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@4cefed7f
>> | authenticator:
>> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@760a30df |
>> profileCreator:
>> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@74dbbea4 |
>> configuration: #OAuth20Configuration# | key:
>> 887838865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com
>> | secret: [protected] | tokenAsHeader: false | responseType: code | scope:
>> profile email | api: com.github.scribejava.apis.GoogleApi20@2b404bd6 |
>> hasBeenCancelledFactory:
>> org.pac4j.oauth.client.Google2Client$$Lambda$1355/0x0000000841157040@18f7dfd4
>>
>> | profileDefinition:
>> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@3f5c98dd |
>> httpClientConfig: null | |]>
>> 2020-01-14 09:35:28,323 DEBUG
>> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <generated
>> sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
>> 2020-01-14 09:35:28,327 DEBUG
>> [org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor] -
>> <sessionState: null / stateParameter:
>> Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]>
>> 2020-01-14 09:35:28,328 INFO [org.pac4j.oauth.client.Google2Client] -
>> <Failed to retrieve or validate credentials: State parameter mismatch:
>> session expired or possible threat of cross-site request forgery>
>>
>> On Tuesday, January 14, 2020 at 9:38:17 AM UTC+2, craab wrote:
>>>
>>> Found, that actually the OAuth-Webflow breaks all pac4j/openId
>>> mechanisms. Further discussions may take place here:
>>> https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/67b0RCGNwHQ
>>>
>>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/a1e0e160-762d-445d-9f36-203cb63f92bd%40apereo.org.
