It needs to match the dspace.url parameter
If your repository home page is visible at "http://mydomain:8080/jspui/
<http://mydomain:8080/jspui/oauth-login>"
the redirect URL should be "http://mydomain:8080/jspui/oauth-login"
Using just http://mydomain:8080 <http://mydomain:8080/jspui/oauth-login>
as redirect URL should work as well but it is a bit more risky from the
security point-of-view
Andrea
Il 27/05/2016 14:39, dummies code fest ha scritto:
Dear Andrea,
I provided this redirect URL "http://mydomain:8080/oauth-login". But I
am not sure if this URL is correct or for example it would be
"http://mydomain:8080/jspui/oauth-login", or if is necessary
configurate something more.
Thank you very much.
2016-05-27 14:25 GMT+02:00 Andrea Bollini <[email protected]
<mailto:[email protected]>>:
Hi,
when you have applied for the ORCID API KEY you have provided the
allowed redirect URLs, see the last paragraph here
http://support.orcid.org/knowledgebase/articles/116739-register-a-client-application
The dspace.url need to be included in such list.
Hope this help,
Andrea
Il 27/05/2016 12:25, [email protected]
<mailto:[email protected]> ha scritto:
Dear team,
I have problems with ORCID integration in DSPACE-CRIS, in the
redirection to DSPACE-CRIS from ORCID is not working. Then, I'm
not sure if I have configured the ORCID in the good way. Could
you help me? Is there any information about to do it?
Thank you very much.
authentication-oauth.orcid-api-url =
http://api.sandbox.orcid.org/v1.2
authentication-oauth.application-token-url =
https://api.sandbox.orcid.org/oauth/token
authentication-oauth.application-authorize-url =
https://sandbox.orcid.org/oauth/authorize
# register for free on ORCID to use an institutional Public API
# IMPORTANT!! Please fill
authentication-oauth.application-client-name with name of client
registered into orcid registries (need by the putcode flow retrieve)
authentication-oauth.application-client-name = myname
authentication-oauth.application-client-id = myid
authentication-oauth.application-client-secret = mysecret
authentication-oauth.application-client-redirect =
${dspace.baseUrl}/oauth-login
# PUBLIC API
#authentication-oauth.application-client-scope =/authenticate
# MEMBER API
authentication-oauth.application-client-scope =/authenticate
/orcid-profile/read-limited /orcid-bio/update /orcid-works/create
/orcid-works/update /funding/create /funding/update
El miércoles, 27 de abril de 2016, 9:50:29 (UTC+2), Oliver
Goldschmidt escribió:
Thank you, Luigi Andrea, I can confirm that your fix is
working fine for me. I now can login via public API (I tried
it on the Orcid Sandbox, but I guess it will work also for
the real Orcid system).
Thank you again very much,
Oliver
Am Dienstag, 26. April 2016 16:18:25 UTC+2 schrieb Pascarelli
Luigi Andrea:
Yes, you are right. I checked the authentication with
Public API and I got the error.
I just push to github the fix
https://github.com/Cineca/DSpace/commit/6fcb1ca2fb7f106e2914f27d41502e7b9501de10
Please, upgrade your code with this patch and try again.
Thank you very much.
Regards,
Luigi Andrea
Il 25/04/2016 17:48, [email protected] ha scritto:
I have been having the same problem for the past several
weeks and I can't find an answer anywhere...
-Whitney
On Monday, April 25, 2016 at 10:12:23 AM UTC-4, Oliver
Goldschmidt wrote:
Again Hello, DSpace CRIS fellows,
another problem occurs on my DSpace CRIS instance:
when I try to login using Orcid, I get an exception
indicating a 403 error. I do not see, where this
exception comes from, neither I understand it, as
our test server should be available for any other
computer...
This is the exception, that I can see trying to login:
-- URL Was:https://my-dspace-host/oauth-login?code=FFFFFF
<https://dspace-cris.tub.tuhh.de/oauth-login?code=FkdJL1>
-- Method: GET
-- Parameters were:
-- code: "FFFFFF"
Exception:
javax.ws.rs <http://javax.ws.rs>.ForbiddenException: HTTP 403
Forbidden
at
org.glassfish.jersey.client.JerseyInvocation.convertToException(JerseyInvocation.java:987)
at
org.glassfish.jersey.client.JerseyInvocation.translate(JerseyInvocation.java:799)
at
org.glassfish.jersey.client.JerseyInvocation.access$500(JerseyInvocation.java:91)
at
org.glassfish.jersey.client.JerseyInvocation$2.call(JerseyInvocation.java:687)
at
org.glassfish.jersey.internal.Errors.process(Errors.java:315)
at
org.glassfish.jersey.internal.Errors.process(Errors.java:297)
at
org.glassfish.jersey.internal.Errors.process(Errors.java:228)
at
org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:444)
at
org.glassfish.jersey.client.JerseyInvocation.invoke(JerseyInvocation.java:683)
at
org.glassfish.jersey.client.JerseyInvocation$Builder.method(JerseyInvocation.java:411)
at
org.glassfish.jersey.client.JerseyInvocation$Builder.get(JerseyInvocation.java:307)
at
org.dspace.authority.orcid.OrcidService.getProfile(OrcidService.java:185)
at
org.dspace.authenticate.OAuthAuthenticationMethod.authenticate(OAuthAuthenticationMethod.java:93)
at
org.dspace.authenticate.AuthenticationManager.authenticateInternal(AuthenticationManager.java:162)
at
org.dspace.authenticate.AuthenticationManager.authenticate(AuthenticationManager.java:99)
at
org.dspace.app.webui.servlet.OAuthAuthenticationServlet.doDSPost(OAuthAuthenticationServlet.java:179)
at
org.dspace.app.webui.servlet.OAuthAuthenticationServlet.doDSGet(OAuthAuthenticationServlet.java:72)
at
org.dspace.app.webui.servlet.DSpaceServlet.processRequest(DSpaceServlet.java:119)
at
org.dspace.app.webui.servlet.DSpaceServlet.doGet(DSpaceServlet.java:67)
at
javax.servlet.http.HttpServlet.service(HttpServlet.java:620)
at
javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at
org.apache.catalina.filters.RequestFilter.process(RequestFilter.java:205)
at
org.apache.catalina.filters.RemoteAddrFilter.doFilter(RemoteAddrFilter.java:71)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at
org.dspace.utils.servlet.DSpaceWebappServletFilter.doFilter(DSpaceWebappServletFilter.java:78)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
at
org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:193)
at
org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
atorg.apache.tomcat.util.net
<http://org.apache.tomcat.util.net>.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:313)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Any ideas, where this is coming from? TIA again,
best - Oliver
-- You received this message because you are subscribed
to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails
from it, send an email to
[email protected]. To post to this group,
send email to [email protected]. Visit this
group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.
-- You received this message because you are subscribed to the
Google Groups "DSpace Technical Support" group. To unsubscribe
from this group and stop receiving emails from it, send an email
to [email protected]
<mailto:[email protected]>. To post to
this group, send email to [email protected]
<mailto:[email protected]>. Visit this group at
https://groups.google.com/group/dspace-tech. For more options,
visit https://groups.google.com/d/optout.
--
Andrea Bollini
International Business Development, Deputy Leader
Open Source & Open Standards Strategy, Head
Cineca
Via dei Tizii, 6
00185 Roma, Italy
tel. +39 06 44 486 087 - mob. +39 348 82 77 525
http://www.cineca.it
--
Andrea Bollini
International Business Development, Deputy Leader
Open Source & Open Standards Strategy, Head
Cineca
Via dei Tizii, 6
00185 Roma, Italy
tel. +39 06 44 486 087 - mob. +39 348 82 77 525
http://www.cineca.it
--
You received this message because you are subscribed to the Google Groups "DSpace
Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.