starsz opened a new issue, #6803:
URL: https://github.com/apache/apisix/issues/6803

   ### Description
   
   Hi,
   When I use openid-connect plugins with the wrong `redirect_uri` in Apache 
APISIX.
   
   Like flow:
   
   ```
    "plugins":{
           "openid-connect":{
                 ... 
               "scope":"openid profile",
               "bearer_only":false,
               "introspection_endpoint_auth_method":"client_secret_post",
               "redirect_uri":"http://127.0.0.1:9080/";
                ...
           }
       },
   ```
   
   Then, I request the "127.0.0.1:9080/", I will get 500, and the error log is 
as follow:
   <img width="424" alt="image" 
src="https://user-images.githubusercontent.com/25628854/162163091-2f333733-bba5-4258-8f38-6a881fcf3aee.png";>
   
   ```
   2022/04/07 17:13:50 [error] 31780#3492140: *1959 [lua] openidc.lua:1378: 
authenticate(): request to the redirect_uri path but there's no session state 
found, client: 127.0.0.1, server: _, request: "GET / HTTP/1.1", host: 
"127.0.0.1:9080"
   2022/04/07 17:13:50 [error] 31780#3492140: *1959 [lua] 
openid-connect.lua:304: phase_func(): OIDC authentication failed: request to 
the redirect_uri path but there's no session state found, client: 127.0.0.1, 
server: _, request: "GET / HTTP/1.1", host: "127.0.0.1:9080"
   ```
   
   
   
   
   I think it's not clear, and as a user, I don't know what happens.So I think 
we should improve the error log so that we can improve the experience of using 
openid-connect plugins.
   
   associated:https://github.com/apache/apisix/issues/2426


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to