I've gone through several simple example service configurations for both
6.1.5 and 6.2.0-RC5, and I'm currently trying:
{
"@class" : "org.apereo.cas.support.oauth.services.OAuthRegisteredService",
"clientId": "client",
"clientSecret": "secret",
"serviceId" : "https://example.net/dashboard";,
"name" : "OAUTH",
"id" : 1,
"attributeReleasePolicy" : {
"@class" :
"org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy",
"allowedAttributes" : [ "java.util.ArrayList", [ "cn", "mail", "sn" ] ]
},
"supportedGrantTypes": [ "java.util.HashSet", [ "password" ] ]
}
When a password grant request is made, CAS cannot find a valid
authentication handler. A UsernamePasswordCredential is extracted, but the
DelegatedClientAuthenticationHandler will only accept ClientCredentials.
Honestly after stepping though the code for days I don't see how this ever
worked. I assume it does however, so I must be missing something.
curl "[my
server]/oauth2.0/token?grant_type=password&client_id=client&client_secret=secret&username=user&password=password"
2020-06-17 15:13:20,269 DEBUG
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Authentication credentials provided for this transaction are
[[UsernamePasswordCredential(username=user, source=null, customFields={})]]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] -
<Candidate/Registered authentication handlers for this transaction are
[[org.apereo.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler@20b9486d,
org.apereo.cas.support.openid.authentication.handler.support.OpenIdCredentialsAuthenticationHandler@4b249051,
org.apereo.cas.support.pac4j.authentication.handler.support.DelegatedClientAuthenticationHandler@7658ca71]]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] -
<Authentication handler resolvers for this transaction are
[[org.apereo.cas.authentication.handler.RegisteredServiceAuthenticationHandlerResolver@7fa005d1]]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] -
<Authentication handler resolvers produced no candidate authentication
handler. Using the default handler resolver instead...>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.AuthenticationHandlerResolver] - <Default
authentication handlers used for this transaction are
[HttpBasedServiceCredentialsAuthenticationHandler,OpenIdCredentialsAuthenticationHandler,DelegatedClientAuthenticationHandler]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] -
<Resolved and finalized authentication handlers to carry out this
authentication transaction are
[[org.apereo.cas.authentication.handler.RegisteredServiceAuthenticationHandlerResolver@7fa005d1]]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Candidate resolved authentication handlers for this transaction are
[[org.apereo.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler@20b9486d,
org.apereo.cas.support.openid.authentication.handler.support.OpenIdCredentialsAuthenticationHandler@4b249051,
org.apereo.cas.support.pac4j.authentication.handler.support.DelegatedClientAuthenticationHandler@7658ca71]]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Attempting to authenticate credential
[UsernamePasswordCredential(username=user, source=null, customFields={})]>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Authentication handler [HttpBasedServiceCredentialsAuthenticationHandler]
does not support the credential type
[UsernamePasswordCredential(username=user, source=null, customFields={})].
Trying next...>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Authentication handler [OpenIdCredentialsAuthenticationHandler] does not
support the credential type [UsernamePasswordCredential(username=user,
source=null, customFields={})]. Trying next...>
2020-06-17 15:13:20,270 DEBUG
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Authentication handler [DelegatedClientAuthenticationHandler] does not
support the credential type [UsernamePasswordCredential(username=user,
source=null, customFields={})]. Trying next...>
Any working password grant configuration or insight would be appreciated.
Thanks,
-Gary
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/abd91b30-3194-4f92-9e2b-92277660dc77o%40apereo.org.
