集成keycloak认证报错

[wang-xiaowu]

Describe 描述

• config.toml

  [Oidc]
  Enable = true
  ClientId = "yearning"
  ClientSecret = "xxx"
  Scope = "email openid profile"
  AuthUrl = "https://keycloak.extension.sopei/realms/sopei-devops/protocol/openid-connect/auth"
  TokenUrl = "https://keycloak.extension.sopei/realms/sopei-devops/protocol/openid-connect/token"
  UserUrl = "https://keycloak.extension.sopei/realms/sopei-devops/protocol/openid-connect/userinfo"
  RedirectUrL = "https://yearning.extension.sopei/oidc/_token-login"
  UserNameKey = "preferred_username"
  RealNameKey = "name"
  EmailKey = "email"
  SessionKey = "session_state"

• 报错日志

  yearning-yearning-1  |  [Info] 2023-04-19 14:26:30 "url":"/" "method":"GET" "status":200 "protocol":"HTTP/1.1" "remote_ip":"116.3.194.203" "bytes_in": "0 bytes" "bytes_out": "380 bytes"
  yearning-yearning-1  |  [Info] 2023-04-19 14:26:31 "url":"/" "method":"GET" "status":200 "protocol":"HTTP/1.1" "remote_ip":"116.3.194.203" "bytes_in": "0 bytes" "bytes_out": "380 bytes"
  yearning-yearning-1  |  [Info] 2023-04-19 14:26:34 "url":"/fetch" "method":"GET" "status":200 "protocol":"HTTP/1.1" "remote_ip":"116.3.194.203" "bytes_in": "0 bytes" "bytes_out": "48 bytes"
  yearning-yearning-1  |  [Info] 2023-04-19 14:26:34 "url":"/oidc/state" "method":"GET" "status":200 "protocol":"HTTP/1.1" "remote_ip":"116.3.194.203" "bytes_in": "0 bytes" "bytes_out": "306 bytes"
  yearning-yearning-1  |  [Critical] 2023-04-19 14:26:49 (/Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/middleware/recovery.go:33) [PANIC RECOVER] runtime error: invalid memory address or nil pointer dereference Traceback:
  yearning-yearning-1  |  /usr/local/go/src/runtime/panic.go:260
  yearning-yearning-1  |  /usr/local/go/src/runtime/panic.go:259
  yearning-yearning-1  |  /Users/henryyee/PersonalProjects/Yearning-go/src/handler/login/oidcLogin.go:72
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/context.go:122
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/middleware/gzip.go:66
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/context.go:122
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/middleware/recovery.go:38
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/context.go:122
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/middleware/logger.go:58
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/context.go:122
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/middleware/cors.go:96
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/context.go:122
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/yee.go:207
  yearning-yearning-1  |  /Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/yee.go:133
  yearning-yearning-1  |  /usr/local/go/src/net/http/server.go:2948
  yearning-yearning-1  |  /usr/local/go/src/net/http/server.go:1992
  yearning-yearning-1  |  /usr/local/go/src/runtime/asm_amd64.s:1595
  yearning-yearning-1  | 
  yearning-yearning-1  |  [Error] 2023-04-19 14:26:49 (/Users/henryyee/go/pkg/mod/github.com/cookie!y/yee@v0.3.5/context.go:140) /oidc/_token-login?state=367126378168&session_state=b3c442d1-0881-4961-9390-614fd387b05d&code=133e362f-38f9-45c0-a21c-8e557fb12313.b3c442d1-0881-4961-9390-614fd387b05d.b7b54bb3-dd6b-44f1-80c0-46a49b70f5ee Internal Server Error
  yearning-yearning-1  |  [Warn] 2023-04-19 14:26:49 "url":"/oidc/_token-login" "method":"GET" "status":500 "protocol":"HTTP/1.1" "remote_ip":"116.3.194.203" "bytes_in": "0 bytes" "bytes_out": "21 bytes"
  yearning-yearning-1  |  [Warn] 2023-04-19 14:26:49 "url":"/favicon.ico" "method":"GET" "status":404 "protocol":"HTTP/1.1" "remote_ip":"116.3.194.203" "bytes_in": "0 bytes" "bytes_out": "-1 bytes"

To Reproduce 如何复现 配置完成后，点击oidc认证，正常跳转至keycloak登录，再keycloak登录成功后跳转回来报错如上信息

Expected behavior 期望的结果

Screenshots 截图 keycloak配置，其他基本为默认，keycloak在yearning登录报错期间没有access denied之类的日志

• 补充接口返回字段信息

Desktop (please complete the following information): 环境

• OS: [e.g. iOS] windows
• Browser [e.g. chrome, safari] chrome
• Version [e.g. 22] 3.1.3
• keycloak version：21.0.1

Additional context 其他 Add any other context about the problem here.

[wang-xiaowu]

问题补充：域名是映射的host

[r0y4d3v]

同样的问题，将endpoint全改成http就好，开发环境自签名证书引发的

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

I have the same problem. Just change all endpoints to http. The problem is caused by the self-signed certificate of the development environment.