You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
When using quarkus:oidc with "quarkus.oidc.authentication.force-redirect-https-scheme=true" the final redirect uri is created with http instead of https.
After authentication via an oidc provider the final redirect points to an non-existent http adress.
Authentication is still successful. When manually correcting the url to https, one can access the protected endpoints.
Quarkus Service runs in a container on http port in OpenShift.
The Routing adds ssl security.
2020-09-16 09:33:41,005 DEBUG [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-1) Authentication request redirect_uri parameter: https://service.domain.net/
2020-09-16 09:33:41,006 DEBUG [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-1) q_auth cookie 'max-age' parameter is set to 1800
2020-09-16 09:33:41,007 INFO [io.qua.htt.access-log] (vert.x-eventloop-thread-1) 10.221.13.1 - - 16/Sep/2020:09:33:41 +0000 "GET / HTTP/1.1" 302 -
2020-09-16 09:33:41,105 DEBUG [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-1) Token request redirect_uri parameter: https://service.domain.net/
2020-09-16 09:33:41,229 DEBUG [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-1) q_session cookie 'max-age' parameter is set to 7200
2020-09-16 09:33:41,229 DEBUG [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-1) Final redirect URI: http://service.domain.net/
--> Final redirect URI is http instead of https
Environment (please complete the following information):
Output of uname -a or ver:
Output of java -version:
openjdk version "11.0.7" 2020-04-14
OpenJDK Runtime Environment GraalVM CE 20.1.0 (build 11.0.7+10-jvmci-20.1-b02)
OpenJDK 64-Bit Server VM GraalVM CE 20.1.0 (build 11.0.7+10-jvmci-20.1-b02, mixed mode, sharing)
GraalVM version (if different from Java):
Quarkus version or git rev: 1.7.3
Build tool (ie. output of mvnw --version or gradlew --version): 3.6.3
Additional context
(Add any other context about the problem here.)
The text was updated successfully, but these errors were encountered:
Describe the bug
When using quarkus:oidc with "quarkus.oidc.authentication.force-redirect-https-scheme=true" the final redirect uri is created with http instead of https.
After authentication via an oidc provider the final redirect points to an non-existent http adress.
Authentication is still successful. When manually correcting the url to https, one can access the protected endpoints.
Quarkus Service runs in a container on http port in OpenShift.
The Routing adds ssl security.
see https://github.com/quarkusio/quarkus/blob/master/extensions/oidc/runtime/src/main/java/io/quarkus/oidc/runtime/CodeAuthenticationMechanism.java#L410
--> https configuration is only used in buildUri(), but not in buildUriWithoutQueryParams()
Expected behavior
https is used instead of http for:
Actual behavior
(Describe the actual behavior clearly and concisely.)
To Reproduce
Steps to reproduce the behavior:
-> redirects to https service. oidc-extension builds the final redirect uri with http resulting in redirect to nonexistent address
Configuration
Screenshots
--> Final redirect URI is http instead of https
Environment (please complete the following information):
uname -a
orver
:java -version
:openjdk version "11.0.7" 2020-04-14
OpenJDK Runtime Environment GraalVM CE 20.1.0 (build 11.0.7+10-jvmci-20.1-b02)
OpenJDK 64-Bit Server VM GraalVM CE 20.1.0 (build 11.0.7+10-jvmci-20.1-b02, mixed mode, sharing)
mvnw --version
orgradlew --version
): 3.6.3Additional context
(Add any other context about the problem here.)
The text was updated successfully, but these errors were encountered: