search

nokia / kong-oidc

OIDC plugin for Kong
Apache License 2.0
454 stars 321 forks source link

X-UserInfo not sent on the second time #49

Closed shlomiken closed 6 years ago

shlomiken commented 6 years ago

i managed to get this working , and i inspect the headers i get on the server side. i get a very long cookie but not the X-UserInfo header. is this expected behavior ?

thanks Shlomi

shlomiken commented 6 years ago

I have a critical question - it looks like the plugin is redirecting to OIDC provider but the redirect back param contains the original path the user was trying to get into , and this is not an allowed callback URl for the OIDC, also it does not make sense that the API would get the callback. here is an exmaple i went for http://machiname:8000/api/people the plugin redirected me to https://domain.auth0.com/authorize?....redirect_uri=http://machiname:8000/api/people

what am i missing here ?

shlomiken commented 6 years ago

@Trojan295 - can you please help here , its quite urgent for me. thanks

shlomiken commented 6 years ago

This was resolved by moving to the git version (master 1.0.5) instead if the official version in luarocks repository which is 1.0.4 , i think the later does not support redirect_uri_path.