search

p2-inc / keycloak-magic-link

Magic Link Authentication for Keycloak
https://phasetwo.io
Other
245 stars 50 forks source link

Fix issue with Keycloak IDP nonce mismatch #67

Closed tfcornerstone closed 9 months ago

tfcornerstone commented 10 months ago

Add the nonce to session note to resolve the OIDCIdentityProvider issue with nonce mismatch.

This issue occurs when one keycloak uses another keycloak with magic link as a broker.

Reference to broker codes causing the issue:

https://github.com/keycloak/keycloak/blob/e14b523a8d569db0f7a0997d247cab12ec2e6011/services/src/main/java/org/keycloak/broker/oidc/OIDCIdentityProvider.java#L416

https://github.com/keycloak/keycloak/blob/e14b523a8d569db0f7a0997d247cab12ec2e6011/services/src/main/java/org/keycloak/broker/oidc/OIDCIdentityProvider.java#L941

Bug:

Screenshot 2024-02-01 183309