[midPoint] oidc + infrastructure url problem

[Markus Calmius]

Hi,

I realised something when I tried to write a problem description for another person.

It actually has nothing to do with OIDC. I can reproduce it the problem using the default security policy/ username/password login.

The problem-description is the same.
Not setting a Public URL = everything works
Setting it = only works when going to <hostname>/midpoint/

What exactly does midpoint reply with when using the public url pattern?


Markus

On Thursday, 16 May 2024 at 12:00, midpoint-request at lists.evolveum.com <midpoint-request at lists.evolveum.com> wrote:

> Send midPoint mailing list submissions to
> midpoint at lists.evolveum.com
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.evolveum.com/mailman/listinfo/midpoint
> or, via email, send a message with subject or body 'help' to
> midpoint-request at lists.evolveum.com
> 
> You can reach the person managing the list at
> midpoint-owner at lists.evolveum.com
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of midPoint digest..."
> 
> 
> Today's Topics:
> 
> 1. oidc + infrastructure url problem (Markus Calmius)
> 2. Introduction to Flexible Authentication Webinar Happening
> Today (Lukas Skublik)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Wed, 15 May 2024 13:46:10 +0000
> From: Markus Calmius markus.calmius at proton.ch
> 
> To: midPoint General Discussion midpoint at lists.evolveum.com
> 
> Subject: [midPoint] oidc + infrastructure url problem
> Message-ID:
> behCR8cM_pWN2b76rYkVNhaT1bhAWFp2NGpxx8AudRldhXNrxFvIKZ2f9aDadMgV0YA6fqzLOpaaIvDqUQRc_Lyi7MoQoeNK0KfpBi15orc=@proton.ch
> 
> 
> Content-Type: text/plain; charset="utf-8"
> 
> Hi,
> 
> I have a weird problem that I do not quite now how to solve/trouble-shoot.
> 
> If I do not set the <publicHttpUrlPattern> every thing works fine.
> 
> I can go to https://<hostname> or https://<hostname>/midpoint or https://<hostname>/midpoint/ and I will be re-directed to our Keycloak instance to login.
> 
> All good.
> Now, if I do configure the <publicHttpUrlPattern> (which I need to be able to use links in email-notifications) I can only go to https://<hostname>/midpoint/
> 
> that is, if I remove the trailing / or omit the /midpoint/ it fails and I see this in the log:
> 
> > ERROR (org.apache.coyote.http11.Http11Processor): Error processing request
> > 
> > java.lang.IllegalStateException: No current ServletRequestAttributes
> 
> 
> It is the same error as if I would go to any other url that does not exist.
> 
> Any ideas what could cause this?
> 
> Thanks,
> Markus
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: https://lists.evolveum.com/pipermail/midpoint/attachments/20240515/8c5de662/attachment-0001.htm
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Thu, 16 May 2024 11:46:29 +0200
> From: Lukas Skublik lukas.skublik at evolveum.com
> 
> To: midpoint at lists.evolveum.com
> Subject: [midPoint] Introduction to Flexible Authentication Webinar
> Happening Today
> Message-ID: a543d94c-4ab7-41cb-8b81-2dea4e3e46e8 at evolveum.com
> 
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> Dear midPoint community,
> 
> I would like to invite you to today’s live webinar "Introduction to
> Flexible Authentication" where you will learn about flexible
> authentication and its basic configuration components.
> 
> I will introduce you to the principles of the authentication sequence
> created by authentication modules and a simple authentication flow with
> a single authentication module to an advanced flow created by required,
> sufficient, and optional modules.
> 
> The webinar starts at 2PM CEST (8AM EDT / 9PM JST)
> 
> Zoom link:
> https://us02web.zoom.us/j/89354128730?pwd=NEtCMlRnc0NZUHAyZWtlZEEzTE50UT09
> Meeting ID: 893 5412 8730
> Passcode: 723687
> 
> Looking forward to seeing you today!
> --
> 
> 
> Lukas Skublik
> Java developer, Evolveum
> 
> 
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
> 
> 
> ------------------------------
> 
> End of midPoint Digest, Vol 145, Issue 12
> *****************************************