starsz opened a new issue, #6803:
URL: https://github.com/apache/apisix/issues/6803
### Description
Hi,
When I use openid-connect plugins with the wrong `redirect_uri` in Apache
APISIX.
Like flow:
```
"plugins":{
"openid-connect":{
...
"scope":"openid profile",
"bearer_only":false,
"introspection_endpoint_auth_method":"client_secret_post",
"redirect_uri":"http://127.0.0.1:9080/"
...
}
},
```
Then, I request the "127.0.0.1:9080/", I will get 500, and the error log is
as follow:
<img width="424" alt="image"
src="https://user-images.githubusercontent.com/25628854/162163091-2f333733-bba5-4258-8f38-6a881fcf3aee.png">
```
2022/04/07 17:13:50 [error] 31780#3492140: *1959 [lua] openidc.lua:1378:
authenticate(): request to the redirect_uri path but there's no session state
found, client: 127.0.0.1, server: _, request: "GET / HTTP/1.1", host:
"127.0.0.1:9080"
2022/04/07 17:13:50 [error] 31780#3492140: *1959 [lua]
openid-connect.lua:304: phase_func(): OIDC authentication failed: request to
the redirect_uri path but there's no session state found, client: 127.0.0.1,
server: _, request: "GET / HTTP/1.1", host: "127.0.0.1:9080"
```
I think it's not clear, and as a user, I don't know what happens.So I think
we should improve the error log so that we can improve the experience of using
openid-connect plugins.
associated:https://github.com/apache/apisix/issues/2426
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]