Question

我正在尝试在Keycloak前面使用icCube并遇到重定向循环。

到目前为止已完成：

将icCube安装在Linux-Debian 10系统上，将8Gb作为VMWare中的虚拟机安装（遵循https://www.iccube.com/support/documentation/user_guide/running_iccube/server_linux.php中的建议）
创建了两个角色：IC3_admin（所有访问权限）和IC3_sales（访问多维数据集销售权限）
根据https://www.iccube.com/support/documentation/user_guide/configuring_iccube/authentication_keycloak.php更改了icCube.xml
icCube /控制台已激活
在同一服务器上安装了密钥斗篷

关于密钥斗篷：

创建了Realm icCube和客户端iccube，其中有2个用户：admin和user
创建了2个角色：管理员和销售

客户端iccube是：

根URL：http://192.168.178.32:8282
有效的重定向uri：“ / icCube / doc / ic3report”和“ / icCube /控制台”

json文件为：

  {
  "realm": "icCube",
  "auth-server-url": "http://192.168.178.32:8080/auth",
  "ssl-required": "external",
  "resource": "iccube",
  "verify-token-audience": true,
  "credentials": {
    "secret": ".... secret ...."
  },
  "confidential-port": 0,
  "policy-enforcer": {}
}

当我登录到“ http://192.168.178.32:8282/icCube/console”时，我获得了非icCube登录名，我曾经使用Keycloak / iccube帐户“ admin”登录（见上文）。

结果是，我得到了一个非常长的URL，并且在Firefox中显示了消息：“页面无法正确重定向”。

icCube日志提供了多个带有已验证的DEBUG语句：

[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.635 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=d640ddd7-a711-4b7e-b5ce-3ae0f53b43f7&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.681 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.681 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=d640ddd7-a711-4b7e-b5ce-3ae0f53b43f7&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=af0c087a-ef4f-4ae0-9135-65b0b4e3a38f.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.681 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.681 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.681 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.691 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.692 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.692 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.693 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.693 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=d640ddd7-a711-4b7e-b5ce-3ae0f53b43f7&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=af0c087a-ef4f-4ae0-9135-65b0b4e3a38f.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.693 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.693 CEST) [keycloak] AUTHENTICATED
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.710 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.711 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.711 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.712 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.712 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.712 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.713 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=463775c9-0f3b-40af-82c2-7f629e0b8450&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.750 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.750 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=463775c9-0f3b-40af-82c2-7f629e0b8450&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=1b68dcf1-93bb-419b-b221-250ccf1e06c7.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.750 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.750 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.750 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.764 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.765 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.765 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.765 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.765 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=463775c9-0f3b-40af-82c2-7f629e0b8450&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=1b68dcf1-93bb-419b-b221-250ccf1e06c7.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.765 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.765 CEST) [keycloak] AUTHENTICATED
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.785 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=59391636-dc93-4677-bce2-e2084d0eb72f&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.826 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.826 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=59391636-dc93-4677-bce2-e2084d0eb72f&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=a53cd244-a2b0-4227-ac72-8f202423f4d4.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.826 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.826 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.826 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.839 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.840 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.840 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.840 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.840 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=59391636-dc93-4677-bce2-e2084d0eb72f&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=a53cd244-a2b0-4227-ac72-8f202423f4d4.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.841 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.841 CEST) [keycloak] AUTHENTICATED
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.857 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.858 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.858 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.858 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.858 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.858 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.858 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=1cc7503b-80fb-435b-b744-171aa06c3b39&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.897 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.897 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=1cc7503b-80fb-435b-b744-171aa06c3b39&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=550019b0-3e57-44c4-aec2-91830305cd05.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.897 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.897 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.897 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=1cc7503b-80fb-435b-b744-171aa06c3b39&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=550019b0-3e57-44c4-aec2-91830305cd05.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.909 CEST) [keycloak] AUTHENTICATED
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.925 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.925 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.926 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.926 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.926 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.926 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:38.926 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=4a3c9e3f-226b-4c6e-ab16-776a8154c814&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.965 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.965 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=4a3c9e3f-226b-4c6e-ab16-776a8154c814&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=e4518c30-e110-4ab2-8eed-f1c9d2fe9cca.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.965 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.965 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.965 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.983 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.984 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.984 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.984 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.984 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=4a3c9e3f-226b-4c6e-ab16-776a8154c814&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=e4518c30-e110-4ab2-8eed-f1c9d2fe9cca.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.984 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:38.984 CEST) [keycloak] AUTHENTICATED
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.007 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=15f5d3cd-6f6b-4c73-80a6-6ed094fed4b9&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.046 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.046 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=15f5d3cd-6f6b-4c73-80a6-6ed094fed4b9&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=df2f1d13-3083-496e-95a9-128f0455b7c6.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.046 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.046 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.046 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.058 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.059 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.059 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.059 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.059 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=15f5d3cd-6f6b-4c73-80a6-6ed094fed4b9&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=df2f1d13-3083-496e-95a9-128f0455b7c6.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.059 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.059 CEST) [keycloak] AUTHENTICATED
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) adminRequest http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) there was no code
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) redirecting to auth server
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) callback uri: http://192.168.178.32:8282/icCube/console
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) [keycloak] challenge
[               qtp689602108-24] [DEBUG] (13-07-19 15:16:39.082 CEST) Sending redirect to login page: http://192.168.178.32:8080/auth/realms/icCube%20-%20IAH/protocol/openid-connect/auth?response_type=code&client_id=iccube&redirect_uri=http%3A%2F%2F192.168.178.32%3A8282%2FicCube%2Fconsole&state=c9ed05ce-bc2f-4a19-ae8c-b076065f7bfc&login=true&scope=openid
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.117 CEST) [keycloak] Keycloak OIDC Filter
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.117 CEST) adminRequest http://192.168.178.32:8282/icCube/console?state=c9ed05ce-bc2f-4a19-ae8c-b076065f7bfc&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=9e424234-efd2-40e7-a23b-97f1a0e035a4.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.117 CEST) there was a code, resolving
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.117 CEST) checking state cookie for after code
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.117 CEST) ** reseting application state cookie
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.126 CEST) Verifying tokens
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.127 CEST) Token Verification succeeded!
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.127 CEST) successful authenticated
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.127 CEST) Adding mapping (bbdc1239-45fa-4dd3-a53e-548fcec11b63, 87fd7de0-430e-4c2c-bcfe-eeafd6525685, node01jxe0ttz3kb2e17wughjmvkqwd4)
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.127 CEST) User '87fd7de0-430e-4c2c-bcfe-eeafd6525685' invoking 'http://192.168.178.32:8282/icCube/console?state=c9ed05ce-bc2f-4a19-ae8c-b076065f7bfc&session_state=bbdc1239-45fa-4dd3-a53e-548fcec11b63&code=9e424234-efd2-40e7-a23b-97f1a0e035a4.bbdc1239-45fa-4dd3-a53e-548fcec11b63.2dfad5fc-49a7-438f-a09f-e06a174efc90' on client 'iccube'
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.127 CEST) AUTHENTICATED
[               qtp689602108-25] [DEBUG] (13-07-19 15:16:39.127 CEST) [keycloak] AUTHENTICATED

密钥斗篷配置出了什么问题（或还有其他可疑之处）？

Answer 1

更像是Keycloak配置的问题；我认为有效的网址是错误的：您可以尝试*代替。

希望有帮助。

Answer 2

已经有一段时间了，但是我想分享对我有用的正确设置。尽管我不确定100％，但我猜想“启用了直接访问授权”可以解决问题。对于我的所有设置，请参见随附的图片。

Keycloak和icCube-卡在重定向循环中-怎么了？

2 个答案: