OIDC handshake seems broken

trustification / trustify-ui

Trustify UI component.

http://www.trustification.io/trustify-ui/

2 stars 8 forks source link

OIDC handshake seems broken #35

Open ctron opened 5 months ago

ctron commented 5 months ago

The application loads
It discovers the OIDC configuration
It redirects to the OIDC issuer
The issuer redirects back to the UI (including the code)
The UI exchanges the code for a token
🔥 The UI redirects to the OIDC issuer again, including the redirect information (code) received in 4.

carlosthe19916 commented 5 months ago

This might be related to https://github.com/trustification/trustify-ui/issues/34#issuecomment-2126837085

This issue appeared while using the UI with a customized oidc provider
I'll wait for https://github.com/trustification/trustify-ui/issues/34 to be solved before investigating this issue, as the problem might not be the UI but the customized oidc provider

ctron commented 5 months ago

Sorry, that last two (deleted) comments should have gone to #33.

ctron commented 5 months ago

So I can see that it behaves differently. The question now is: why?

carlosthe19916 commented 5 months ago

My expectation is that if we were able to fully solve https://github.com/trustification/trustify-ui/issues/34 and the conclusions made there; then, this problem will also be gone.

Let's attack one problem at a time, which is https://github.com/trustification/trustify-ui/issues/34

ctron commented 5 months ago

I think the actual problem is here. Issue #34 is more a cache issue. Maybe a browser issue because of that infinite loop. I wouldn't want to waste any cycles in this issue. Because there's a way to "fix" it by reloading in a new tab.