Closed cyf992002 closed 7 years ago
Hi Tuomo , Thanks for the reply. Yes, I have. Please see my configuration below. I looked into the code and the plugin works well after I commented out 'session.configure(config)' in handler.lua. Any thoughts? [image: Inline image 2]
On Tue, Jun 27, 2017 at 1:22 PM, Tuomo Syrjänen notifications@github.com wrote:
Have you created a client in keycloak for your plugin? When you enable this plugin in kong you should tell client name (client_name_in_oidc_provider) and secret (client_secret_in_oidc_provider), for example
curl -i -X POST --url http://localhost:8001/plugins/ --data 'name=
' --data "config.client_id= " --data "config.client_secret= " --data "config.discovery=https:// /auth/ realms/ /.well-known/openid-configuration" — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/nokia/kong-oidc/issues/1#issuecomment-311256171, or mute the thread https://github.com/notifications/unsubscribe-auth/ABJ-OxParGlSQs-xXmWp_xKSiwlrenPgks5sIJGsgaJpZM4OFYSK .
here comes the config
Hi, sorry that I deleted my question. But it is good that you gave your config because I noticed that we have a bug (there should be no default value, and we have "no").
We have added session_secret because of this https://github.com/pingidentity/lua-resty-openidc/issues/39
We should correct this (remove default value) and give instructions how to set session_secret (you need also something in ngix configuration).
Could you please tell what Nginx config should I do? and how to set the session secret? Thanks for your help
In nginx conf-file we have added under
server { server_name kong;
following line
set_decode_base64 $session_secret 'XX';
In XX we use some decoded default value which kong-oidc will later change.
When enabling oidc plugin you could give also session_secret, for example
curl -i -X POST --url http://localhost:8001/plugins/ \
--data 'name=
Hello, I am using this plugin to work with keycloak and get following error every time I send a request to the server. Please help. 2017/06/26 22:15:51 [error] 1014#0: *3793 lua entry thread aborted: runtime error: /usr/local/share/lua/5.1/kong/plugins/oidc/session.lua:11: variable "session_secret" not found for writing; maybe it is a built-in variable that is not changeable or you forgot to use "set $session_secret '';" in the config file to define it first?G? stack traceback: coroutine 0: [C]: in function '__newindex' /usr/local/share/lua/5.1/kong/plugins/oidc/session.lua:11: in function 'configure' /usr/local/share/lua/5.1/kong/plugins/oidc/handler.lua:27: in function 'access' /usr/local/share/lua/5.1/kong.lua:295: in function 'access' access_by_lua(nginx-kong.conf:85):2: in function <access_by_lua(nginx-kong.conf:85):1>, client: 127.0.0.1, server: kong, request: "GET /services/v2/Product HTTP/1.1", host: "127.0.0.1:8000"