It needs to match the dspace.url parameter
If your repository home page is visible at "http://mydomain:8080/jspui/ <http://mydomain:8080/jspui/oauth-login>"
the redirect URL should be "http://mydomain:8080/jspui/oauth-login";

Using just http://mydomain:8080 <http://mydomain:8080/jspui/oauth-login> as redirect URL should work as well but it is a bit more risky from the security point-of-view
Andrea

Il 27/05/2016 14:39, dummies code fest ha scritto:
Dear Andrea,

I provided this redirect URL "http://mydomain:8080/oauth-login";. But I am not sure if this URL is correct or for example it would be "http://mydomain:8080/jspui/oauth-login";, or if is necessary configurate something more.

Thank you very much.

2016-05-27 14:25 GMT+02:00 Andrea Bollini <[email protected] <mailto:[email protected]>>:

    Hi,
    when you have applied for the ORCID API KEY you have provided the
    allowed redirect URLs, see the last paragraph here
    
http://support.orcid.org/knowledgebase/articles/116739-register-a-client-application

    The dspace.url need to be included in such list.
    Hope this help,
    Andrea

    Il 27/05/2016 12:25, [email protected]
    <mailto:[email protected]> ha scritto:
    Dear team,

    I have problems with ORCID integration in DSPACE-CRIS, in the
    redirection to DSPACE-CRIS from ORCID is not working. Then, I'm
    not sure if I have configured the ORCID in the good way. Could
    you help me? Is there any information about to do it?

    Thank you very much.

    authentication-oauth.orcid-api-url =
    http://api.sandbox.orcid.org/v1.2
    authentication-oauth.application-token-url =
    https://api.sandbox.orcid.org/oauth/token
    authentication-oauth.application-authorize-url =
    https://sandbox.orcid.org/oauth/authorize

    # register for free on ORCID to use an institutional Public API
    # IMPORTANT!! Please fill
    authentication-oauth.application-client-name with name of client
    registered into orcid registries (need by the putcode flow retrieve)
    authentication-oauth.application-client-name = myname
    authentication-oauth.application-client-id = myid
    authentication-oauth.application-client-secret = mysecret
    authentication-oauth.application-client-redirect =
    ${dspace.baseUrl}/oauth-login

    # PUBLIC API
    #authentication-oauth.application-client-scope =/authenticate

    # MEMBER API
    authentication-oauth.application-client-scope =/authenticate
    /orcid-profile/read-limited /orcid-bio/update /orcid-works/create
    /orcid-works/update /funding/create /funding/update


    El miércoles, 27 de abril de 2016, 9:50:29 (UTC+2), Oliver
    Goldschmidt escribió:

        Thank you, Luigi Andrea, I can confirm that your fix is
        working fine for me. I now can login via public API (I tried
        it on the Orcid Sandbox, but I guess it will work also for
        the real Orcid system).

        Thank you again very much,
        Oliver

        Am Dienstag, 26. April 2016 16:18:25 UTC+2 schrieb Pascarelli
        Luigi Andrea:

            Yes, you are right. I checked the authentication with
            Public API and I got the error.
            I just push to github the fix
            
https://github.com/Cineca/DSpace/commit/6fcb1ca2fb7f106e2914f27d41502e7b9501de10
            Please, upgrade your code with this patch and try again.

            Thank you very much.

            Regards,

            Luigi Andrea

            Il 25/04/2016 17:48, [email protected] ha scritto:
            I have been having the same problem for the past several
            weeks and I can't find an answer anywhere...

            -Whitney

            On Monday, April 25, 2016 at 10:12:23 AM UTC-4, Oliver
            Goldschmidt wrote:

                Again Hello, DSpace CRIS fellows,

                another problem occurs on my DSpace CRIS instance:
                when I try to login using Orcid, I get an exception
                indicating a 403 error. I do not see, where this
                exception comes from, neither I understand it, as
                our test server should be available for any other
                computer...

                This is the exception, that I can see trying to login:

                -- URL Was:https://my-dspace-host/oauth-login?code=FFFFFF
                <https://dspace-cris.tub.tuhh.de/oauth-login?code=FkdJL1>
                -- Method: GET
                -- Parameters were:
                -- code: "FFFFFF"


                Exception:
                javax.ws.rs <http://javax.ws.rs>.ForbiddenException: HTTP 403 
Forbidden
                        at 
org.glassfish.jersey.client.JerseyInvocation.convertToException(JerseyInvocation.java:987)
                        at 
org.glassfish.jersey.client.JerseyInvocation.translate(JerseyInvocation.java:799)
                        at 
org.glassfish.jersey.client.JerseyInvocation.access$500(JerseyInvocation.java:91)
                        at 
org.glassfish.jersey.client.JerseyInvocation$2.call(JerseyInvocation.java:687)
                        at 
org.glassfish.jersey.internal.Errors.process(Errors.java:315)
                        at 
org.glassfish.jersey.internal.Errors.process(Errors.java:297)
                        at 
org.glassfish.jersey.internal.Errors.process(Errors.java:228)
                        at 
org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:444)
                        at 
org.glassfish.jersey.client.JerseyInvocation.invoke(JerseyInvocation.java:683)
                        at 
org.glassfish.jersey.client.JerseyInvocation$Builder.method(JerseyInvocation.java:411)
                        at 
org.glassfish.jersey.client.JerseyInvocation$Builder.get(JerseyInvocation.java:307)
                        at 
org.dspace.authority.orcid.OrcidService.getProfile(OrcidService.java:185)
                        at 
org.dspace.authenticate.OAuthAuthenticationMethod.authenticate(OAuthAuthenticationMethod.java:93)
                        at 
org.dspace.authenticate.AuthenticationManager.authenticateInternal(AuthenticationManager.java:162)
                        at 
org.dspace.authenticate.AuthenticationManager.authenticate(AuthenticationManager.java:99)
                        at 
org.dspace.app.webui.servlet.OAuthAuthenticationServlet.doDSPost(OAuthAuthenticationServlet.java:179)
                        at 
org.dspace.app.webui.servlet.OAuthAuthenticationServlet.doDSGet(OAuthAuthenticationServlet.java:72)
                        at 
org.dspace.app.webui.servlet.DSpaceServlet.processRequest(DSpaceServlet.java:119)
                        at 
org.dspace.app.webui.servlet.DSpaceServlet.doGet(DSpaceServlet.java:67)
                        at 
javax.servlet.http.HttpServlet.service(HttpServlet.java:620)
                        at 
javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
                        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
                        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
                        at 
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
                        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
                        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
                        at 
org.apache.catalina.filters.RequestFilter.process(RequestFilter.java:205)
                        at 
org.apache.catalina.filters.RemoteAddrFilter.doFilter(RemoteAddrFilter.java:71)
                        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
                        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
                        at 
org.dspace.utils.servlet.DSpaceWebappServletFilter.doFilter(DSpaceWebappServletFilter.java:78)
                        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
                        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
                        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
                        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
                        at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)
                        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)
                        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
                        at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
                        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
                        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
                        at 
org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:193)
                        at 
org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
                        atorg.apache.tomcat.util.net
                
<http://org.apache.tomcat.util.net>.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:313)
                        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
                        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
                        at java.lang.Thread.run(Thread.java:745)

                Any ideas, where this is coming from? TIA again,
                best - Oliver

            -- You received this message because you are subscribed
            to the Google Groups "DSpace Technical Support" group.
            To unsubscribe from this group and stop receiving emails
            from it, send an email to
            [email protected]. To post to this group,
            send email to [email protected]. Visit this
            group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

    -- You received this message because you are subscribed to the
    Google Groups "DSpace Technical Support" group. To unsubscribe
    from this group and stop receiving emails from it, send an email
    to [email protected]
    <mailto:[email protected]>. To post to
    this group, send email to [email protected]
    <mailto:[email protected]>. Visit this group at
    https://groups.google.com/group/dspace-tech. For more options,
visit https://groups.google.com/d/optout.

-- Andrea Bollini
    International Business Development, Deputy Leader
    Open Source & Open Standards Strategy, Head
    Cineca

    Via dei Tizii, 6
    00185 Roma, Italy
    tel. +39 06 44 486 087 - mob. +39 348 82 77 525
http://www.cineca.it



--
Andrea Bollini
International Business Development, Deputy Leader
Open Source & Open Standards Strategy, Head
Cineca

Via dei Tizii, 6
00185 Roma, Italy
tel. +39 06 44 486 087 - mob. +39 348 82 77 525
http://www.cineca.it

--
You received this message because you are subscribed to the Google Groups "DSpace 
Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Reply via email to