Alexander Swerdlow created ZEPPELIN-4901:
--------------------------------------------
Summary: OpenID Connect Auth Immediately Redirects to /null
Key: ZEPPELIN-4901
URL: https://issues.apache.org/jira/browse/ZEPPELIN-4901
Project: Zeppelin
Issue Type: Bug
Components: rest-api, security, zeppelin-server
Affects Versions: 0.8.2
Environment: Both Windows 10 and macOS
Reporter: Alexander Swerdlow
Attachments: shiro.ini
I've tried many times following some of the configurations above, but for some
strange reason, keep getting redirected to {{http://ZEPPELIN_ROOT/null}}. It
appears that a request for {{http://ZEPPELIN_ROOT/api/security/ticket}} is
denied ("401 unauthorized request") and subsequently redirected to{{/null}} (It
does this very quickly). Strangely enough, however, I can manually access
{{http://ZEPPELIN_ROOT/api/security/ticket}}, login, and then once I manually
navigate to {{http://ZEPPELIN_ROOT}} it shows I'm logged in.
It appears that the X-Frame Option in the Response header is set to "Deny" even
though I changed it to "SAMEORIGIN" in zeppelin-site.xml (Also tried just a
blank value).
I'm really not sure where the {{null}} is coming from and not sure what to do
(or if OpenID Connect is still supported). I attached my shiro.ini file
({{localhost:8085}} is my Keycloak Root and {{localhost:8080}} is my Zeppelin
Root).
Furthermore, the following is shown in the log "out" file every time I access
Zeppelin:
{code:java}
Jun 21, 2020 10:15:06 PM org.glassfish.jersey.internal.Errors logErrors
WARNING: The following warnings have been detected: WARNING: A HTTP GET method,
public javax.ws.rs.core.Response
org.apache.zeppelin.rest.InterpreterRestApi.listInterpreter(java.lang.String),
should not consume any entity.
WARNING: A HTTP GET method, public javax.ws.rs.core.Response
org.apache.zeppelin.rest.CredentialRestApi.getCredentials(java.lang.String)
throws java.io.IOException,java.lang.IllegalArgumentException, should not
consume any entity.
WARNING: The (sub)resource method createNote in
org.apache.zeppelin.rest.NotebookRestApi contains empty path annotation.
WARNING: The (sub)resource method getNoteList in
org.apache.zeppelin.rest.NotebookRestApi contains empty path annotation.
{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
