带有身份验证和Openresty的身份验证流程卡在Safari浏览器中

时间:2019-10-22 08:06:35

标签: keycloak lua-resty-openidc

我在Safari中的authenticate()有问题。 在keycloak登录页面中输入用户名和密码后,该页面将卡住。 在chrome中,同样的东西也可以正常工作。 如果我比较Safari和Chrome之间的日志,可以看到Chrome中有更多日志。 我正在使用Safari的Web开发人员工具,并查看所有请求,直到我没有看到的302重定向响应为止。我认为重定向响应未到达浏览器。

知道为什么没有重定向响应吗?

环境 lua-resty-openidc版本(1.7.2) OpenID Connect提供程序(Keycloak) 预期行为 野生动物园的行为会像镀铬一样。

实际行为 Safai堆栈。

Safari日志:

2019/10/10 12:21:22 [debug] 33#33: 1522 [lua] openidc.lua:553: openidc_jwks(): response data: {"keys":*************
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:658: openidc_pem_from_x5c(): Found x5c, getting PEM public key from x5c entry of json public key
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:663: openidc_pem_from_x5c(): Generated PEM key from x5c:-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
2019/10/10 12:21:22 [debug] 33#33: 1522 [lua] openidc.lua:827: openidc_load_jwt_and_verify_crypto(): jwt: {"signature":"","reason":"everything is awesome~ :p","valid":true,"raw_header":"","payload":{"nbf":0,"azp":"client-proxy","iat":1570710082,"iss":"","aud":"client-proxy","nonce":"","preferred_username":","auth_time":1570710081,"acr":"1","session_state":"e87ce88f-6b92-464a-9b19-162666ced834","exp":1570882882,"email_verified":false,"jti":"973e7d10-a649-4606-a63b-d76d9ce7cf8a","sub":"cf3b3350-7733-466d-9209-4f2ef982966f","typ":"ID"},"header":{"kid":"************","alg":"RS256","typ":"JWT"},"verified":true,"raw_payload":"***********************
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:870: openidc_load_and_validate_jwt_id_token(): id_token header: **********
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:871: *************
019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:428: openidc_call_userinfo_endpoint(): authorization header 'Bearer ************
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:357: openidc_configure_proxy(): openidc_configure_proxy : don't use http proxy
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] http.lua:633: send_request():
GET /auth/realms/pointer/protocol/openid-connect/userinfo HTTP/1.1
User-Agent: lua-resty-http/0.12 (Lua) ngx_lua/10013
Authorization: Bearer (*************host: ******************

2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:442: openidc_call_userinfo_endpoint(): userinfo response: {"sub":"cf3b3350-7733-466d-9209-4f2ef982966f","email_verified":false,"preferred_username":"samantha.fix@fbi.org"}
2019/10/10 12:21:22 [debug] 33#33: *1522 [lua] openidc.lua:984: authenticate(): OIDC Authorization Code Flow completed -> Redirecting to original URL (/pointer/app/)
172.17.1.184 - - [10/Oct/2019:12:21:22 +0000] "GET /redirect_uri?state=...........&scope=openid" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15"

从这里卡住,日志停止

0 个答案:

没有答案