This seems like a conflict between "cas-server-support-oidc" and
"cas-server-support-pac4j-webflow".
When I removed "cas-server-support-oidc" from dependencies state mismatch
went away.
I'm using CAS 6.1.5
W dniu wtorek, 14 stycznia 2020 10:05:49 UTC+1 użytkownik Wimpie De Klerk
napisał:
>
> No
>
> My dependancies:
> implementation project(":core:cas-server-core")
> implementation project(":core:cas-server-core-audit")
> implementation project(":core:cas-server-core-authentication")
> implementation project(":core:cas-server-core-configuration")
> implementation project(":core:cas-server-core-cookie")
> implementation project(":core:cas-server-core-logout")
> implementation project(":core:cas-server-core-logging")
> implementation project(":core:cas-server-core-services")
> implementation project(":core:cas-server-core-tickets")
> implementation project(":core:cas-server-core-util")
> implementation project(":core:cas-server-core-validation")
> implementation project(":core:cas-server-core-web")
>
> implementation project(":support:cas-server-support-actions")
> implementation project(":support:cas-server-support-person-directory")
> implementation project(":support:cas-server-support-themes")
> implementation project(":support:cas-server-support-validation")
> implementation project(":support:cas-server-support-pm-webflow")
>
> implementation project(":webapp:cas-server-webapp-config")
> implementation project(":webapp:cas-server-webapp-init")
> implementation project(":webapp:cas-server-webapp-resources")
>
> implementation
> project(":support:cas-server-support-jpa-service-registry")
> implementation project(":support:cas-server-support-jdbc-drivers")
> implementation project(":support:cas-server-support-ldap")
> implementation project(":support:cas-server-support-saml")
> implementation project(":core:cas-server-core-rest")
> implementation project(":support:cas-server-support-oidc")
> implementation project(":support:cas-server-support-surrogate-webflow")
> implementation
> project(":support:cas-server-support-surrogate-authentication-ldap")
> implementation project(":support:cas-server-support-gauth")
> implementation project(":support:cas-server-support-gauth-jpa")
> implementation project(":support:cas-server-support-trusted-mfa")
> implementation project(":support:cas-server-support-trusted-mfa-jdbc")
> implementation project(":support:cas-server-support-audit-jdbc")
> implementation project(":support:cas-server-support-throttle-jdbc")
> implementation project(":support:cas-server-support-sentry")
> implementation
> project(":support:cas-server-support-ehcache-ticket-registry")
> implementation project(":support:cas-server-support-discovery-profile")
> implementation project(":support:cas-server-support-aup-webflow")
> implementation project(":support:cas-server-support-aup-ldap")
> implementation project(":support:cas-server-support-pm-ldap")
> implementation project(":support:cas-server-support-pac4j-webflow")
>
>
> More detail log with DistributedJ2ESessionStore trace:
>
> 2020-01-14 10:34:29,815 TRACE
> [org.apereo.cas.support.oauth.services.OAuth20AuthenticationServiceSelectionStrategy]
>
> - <Authentication request is not identified as an OAuth request>
> 2020-01-14 10:34:29,816 DEBUG
> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Storing delegated
> authentication request ticket [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] for
> service [null] with properties [{theme=, targetService=null, method=,
> locale=, service=null}]>
> 2020-01-14 10:34:29,816 TRACE [org.apereo.cas.ticket.DefaultTicketCatalog]
> - <Locating ticket definition for ticket
> [TransientSessionTicketImpl(super=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9,
> service=null, properties={theme=, targetService=null, method=, locale=,
> service=null})]>
> 2020-01-14 10:34:29,817 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:29,817 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:29,817 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding ticket
> [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] to the cache
> [transientSessionTicketsCache] to live [300] seconds and stay idle for
> [300] seconds>
> 2020-01-14 10:34:29,817 DEBUG
> [org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder] - <save
> sessionState: TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9>
> 2020-01-14 10:34:29,819 DEBUG
> [org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder] -
> <authorizationUrl:
> https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=887558865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com&redirect_uri=https%3A%2F%2Frrrrrr%2Fcas%2Flogin%3Fclient_name%3DOAuthclient&scope=profile%20email&state=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9
> >
> 2020-01-14 10:34:29,819 DEBUG
> [org.apereo.cas.web.DelegatedClientNavigationController] - <Determined
> final redirect action for client [#Google2Client# | name: OAuthclient |
> callbackUrl: https://rrrrr | callbackUrlResolver:
> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@16b02425 |
> ajaxRequestResolver:
> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@ea9f5d0 |
> redirectionActionBuilder:
> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@77ac0f67 |
> credentialsExtractor:
> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@65737eda
> | authenticator:
> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@7275ff5d |
> profileCreator:
> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@333383b6 |
> configuration: #OAuth20Configuration# | key:
> 778738865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com
> | secret: [protected] | tokenAsHeader: false | responseType: code | scope:
> profile email | api: com.github.scribejava.apis.GoogleApi20@24736580 |
> hasBeenCancelledFactory:
> org.pac4j.oauth.client.Google2Client$$Lambda$1370/0x00000008411c2c40@5a885a7a
> | profileDefinition:
> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@7dad961 |
> httpClientConfig: null | |] as [#HttpAction# | code: 302 |]>
> 2020-01-14 10:34:29,820 DEBUG
> [org.apereo.cas.web.DelegatedClientNavigationController] - <Redirecting
> client [OAuthclient] to [
> https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=778738865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com&redirect_uri=https%3A%2F%2Frrrrrrr%2Fcas%2Flogin%3Fclient_name%3DOAuthclient&scope=profile%20email&state=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]
>
> based on identifier [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]>
> 2020-01-14 10:34:34,145 TRACE
> [org.apereo.cas.web.support.gen.TicketGrantingCookieRetrievingCookieGenerator]
>
> - <Removed cookie 'TGC'>
> 2020-01-14 10:34:34,146 TRACE
> [org.apereo.cas.support.oauth.services.OAuth20AuthenticationServiceSelectionStrategy]
>
> - <Authentication request is not identified as an OAuth request>
> 2020-01-14 10:34:34,146 DEBUG
> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier
> could not found as part of the request parameters. Looking at state for the
> OAuth2/Oidc client>
> 2020-01-14 10:34:34,146 DEBUG
> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated
> client identifier for this request as
> [Optional[TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]]>
> 2020-01-14 10:34:34,146 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,146 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,147 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,147 DEBUG
> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated
> client identifier as [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]>
> 2020-01-14 10:34:34,147 TRACE
> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Restoring requested
> service [null] back in the authentication flow>
> 2020-01-14 10:34:34,147 DEBUG
> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Removing delegated
> client identifier [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] from registry>
> 2020-01-14 10:34:34,147 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,147 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,147 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,147 DEBUG
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Removing ticket
> [TransientSessionTicketImpl(super=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9,
> service=null, properties={theme=, targetService=null, method=, locale=,
> service=null})] from the registry.>
> 2020-01-14 10:34:34,147 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,147 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,147 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,147 TRACE [org.apereo.cas.ticket.DefaultTicketCatalog]
> - <Locating ticket definition for ticket
> [TransientSessionTicketImpl(super=TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9,
> service=null, properties={theme=, targetService=null, method=, locale=,
> service=null})]>
> 2020-01-14 10:34:34,147 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,148 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,148 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket
> [TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9] is removed>
> 2020-01-14 10:34:34,148 TRACE
> [org.apereo.cas.support.oauth.services.OAuth20AuthenticationServiceSelectionStrategy]
>
> - <Authentication request is not identified as an OAuth request>
> 2020-01-14 10:34:34,148 DEBUG
> [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Delegated
> authentication client is [#Google2Client# | name: OAuthclient |
> callbackUrl: https://rrrr | callbackUrlResolver:
> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@16b02425 |
> ajaxRequestResolver:
> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@ea9f5d0 |
> redirectionActionBuilder:
> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@77ac0f67 |
> credentialsExtractor:
> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@65737eda
> | authenticator:
> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@7275ff5d |
> profileCreator:
> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@333383b6 |
> configuration: #OAuth20Configuration# | key:
> 877865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com |
> secret: [protected] | tokenAsHeader: false | responseType: code | scope:
> profile email | api: com.github.scribejava.apis.GoogleApi20@24736580 |
> hasBeenCancelledFactory:
> org.pac4j.oauth.client.Google2Client$$Lambda$1370/0x00000008411c2c40@5a885a7a
> | profileDefinition:
> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@7dad961 |
> httpClientConfig: null | |] with service [null]>
> 2020-01-14 10:34:34,148 DEBUG
> [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Fetching
> credentials from delegated client [#Google2Client# | name: OAuthclient |
> callbackUrl: https://rrrrrr | callbackUrlResolver:
> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@16b02425 |
> ajaxRequestResolver:
> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@ea9f5d0 |
> redirectionActionBuilder:
> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@77ac0f67 |
> credentialsExtractor:
> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@65737eda
> | authenticator:
> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@7275ff5d |
> profileCreator:
> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@333383b6 |
> configuration: #OAuth20Configuration# | key:
> 8444438865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com
> | secret: [protected] | tokenAsHeader: false | responseType: code | scope:
> profile email | api: com.github.scribejava.apis.GoogleApi20@24736580 |
> hasBeenCancelledFactory:
> org.pac4j.oauth.client.Google2Client$$Lambda$1370/0x00000008411c2c40@5a885a7a
> | profileDefinition:
> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@7dad961 |
> httpClientConfig: null | |]>
> 2020-01-14 10:34:34,148 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <getting
> key: OAuthclient$stateSessionParameter>
> 2020-01-14 10:34:34,148 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <retrieved
> sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
> 2020-01-14 10:34:34,148 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <fetching
> ticket: TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
> 2020-01-14 10:34:34,148 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,148 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <setting
> key: OAuthclient$stateSessionParameter>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <retrieved
> sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <retrieved
> sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <fetching
> ticket: TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,149 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,149 TRACE [org.apereo.cas.ticket.DefaultTicketCatalog]
> - <Locating ticket definition for ticket
> [TransientSessionTicketImpl(super=TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb,
> service=null, properties={OAuthclient$attemptedAuthentication=true})]>
> 2020-01-14 10:34:34,149 TRACE
> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket
> encryption is not enabled. Falling back to default behavior>
> 2020-01-14 10:34:34,149 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Locating cache
> name [transientSessionTicketsCache] for ticket definition
> [DefaultTicketDefinition(implementationClass=class
> org.apereo.cas.ticket.TransientSessionTicketImpl, prefix=TST,
> properties=DefaultTicketDefinitionProperties(cascade=false,
> storageName=transientSessionTicketsCache, storageTimeout=300,
> storagePassword=null), order=2147483647)]>
> 2020-01-14 10:34:34,150 DEBUG
> [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding ticket
> [TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb] to the cache
> [transientSessionTicketsCache] to live [300] seconds and stay idle for
> [300] seconds>
> 2020-01-14 10:34:34,150 TRACE
> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <updated
> ticket: TST-ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
> 2020-01-14 10:34:34,150 DEBUG
> [org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor] -
> <sessionState: null / stateParameter:
> Optional[TST-2-JmBrM5GFKgRKUQdGEP8RehANTBtzjUd9]>
> 2020-01-14 10:34:34,150 INFO [org.pac4j.oauth.client.Google2Client] -
> <Failed to retrieve or validate credentials: State parameter mismatch:
> session expired or possible threat of cross-site request forgery>
>
>
> On Tuesday, January 14, 2020 at 10:28:48 AM UTC+2, craab wrote:
>>
>> Are you using
>> "org.apereo.cas:cas-server-support-oauth-webflow:${project.'cas.version'}" ?
>>
>> Am Dienstag, 14. Januar 2020 09:06:22 UTC+1 schrieb Wimpie De Klerk:
>>>
>>> Hi
>>>
>>> I am using 6.1.3 and also get this error
>>>
>>> 2020-01-14 09:35:28,299 DEBUG
>>> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier
>>> could not found as part of the request parameters. Looking at state for the
>>> OAuth2/Oidc client>
>>> 2020-01-14 09:35:28,299 DEBUG
>>> [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated
>>> client identifier for this request as
>>> [Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]]>
>>> 2020-01-14 09:35:28,309 DEBUG
>>> [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Delegated
>>> authentication client is [#Google2Client# | name: OAuthclient |
>>> callbackUrl: https://rrrrrr | callbackUrlResolver:
>>> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@f06bb36 |
>>> ajaxRequestResolver:
>>> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@46889b69 |
>>> redirectionActionBuilder:
>>> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@2bbe9f46 |
>>> credentialsExtractor:
>>> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@4cefed7f
>>> | authenticator:
>>> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@760a30df |
>>> profileCreator:
>>> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@74dbbea4 |
>>> configuration: #OAuth20Configuration# | key:
>>> 887838865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com
>>> | secret: [protected] | tokenAsHeader: false | responseType: code | scope:
>>> profile email | api: com.github.scribejava.apis.GoogleApi20@2b404bd6 |
>>> hasBeenCancelledFactory:
>>> org.pac4j.oauth.client.Google2Client$$Lambda$1355/0x0000000841157040@18f7dfd4
>>>
>>> | profileDefinition:
>>> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@3f5c98dd |
>>> httpClientConfig: null | |] with service [null]>
>>> 2020-01-14 09:35:28,309 DEBUG
>>> [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Fetching
>>> credentials from delegated client [#Google2Client# | name: OAuthclient |
>>> callbackUrl: https://rrrrrrr | callbackUrlResolver:
>>> org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@f06bb36 |
>>> ajaxRequestResolver:
>>> org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@46889b69 |
>>> redirectionActionBuilder:
>>> org.pac4j.oauth.redirect.OAuth20RedirectionActionBuilder@2bbe9f46 |
>>> credentialsExtractor:
>>> org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor@4cefed7f
>>> | authenticator:
>>> org.pac4j.oauth.credentials.authenticator.OAuth20Authenticator@760a30df |
>>> profileCreator:
>>> org.pac4j.oauth.profile.creator.OAuth20ProfileCreator@74dbbea4 |
>>> configuration: #OAuth20Configuration# | key:
>>> 887838865462-7gbbnqbvm4lsu50rfr0osjs19us81ehf.apps.googleusercontent.com
>>> | secret: [protected] | tokenAsHeader: false | responseType: code | scope:
>>> profile email | api: com.github.scribejava.apis.GoogleApi20@2b404bd6 |
>>> hasBeenCancelledFactory:
>>> org.pac4j.oauth.client.Google2Client$$Lambda$1355/0x0000000841157040@18f7dfd4
>>>
>>> | profileDefinition:
>>> org.pac4j.oauth.profile.google2.Google2ProfileDefinition@3f5c98dd |
>>> httpClientConfig: null | |]>
>>> 2020-01-14 09:35:28,323 DEBUG
>>> [org.apereo.cas.integration.pac4j.DistributedJ2ESessionStore] - <generated
>>> sessionId: ca06c1fd-29db-4e31-ad6c-5c607c4148fb>
>>> 2020-01-14 09:35:28,327 DEBUG
>>> [org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor] -
>>> <sessionState: null / stateParameter:
>>> Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]>
>>> 2020-01-14 09:35:28,328 INFO [org.pac4j.oauth.client.Google2Client] -
>>> <Failed to retrieve or validate credentials: State parameter mismatch:
>>> session expired or possible threat of cross-site request forgery>
>>>
>>> On Tuesday, January 14, 2020 at 9:38:17 AM UTC+2, craab wrote:
>>>>
>>>> Found, that actually the OAuth-Webflow breaks all pac4j/openId
>>>> mechanisms. Further discussions may take place here:
>>>> https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/67b0RCGNwHQ
>>>>
>>>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/acadeff1-f578-4089-86ce-c3e25352a139%40apereo.org.
