OIDC with 7.3 and code
Vallee Romain
Hello,
I migrated from version 6 to latest version 7 of Jasig, and since then, my services that use OIDC authentication no longer work. We're getting this error message:
Argument #2 ($code) must be of type string, null given, called in .
I tried adapting my services using this syntax:
root@cas7:/etc/cas/config# cat ../services/centreon-16.json
{
“@class”: “org.apereo.cas.services.OidcRegisteredService”,
“clientId”: “xxxxx”,
“clientSecret”: “xxxxx”,
“serviceId”: “http://192.168.14.159/centreon/authentication/providers/configurations/openid”,
“evaluationOrder”: 1,
“name”: “centreon”,
“id”: 16,
“bypassApprovalPrompt”: true,
“accessStrategy”: {
“@class”: “org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy”,
“enabled”: true,
“ssoEnabled”: true,
“requireAllAttributes”: false,
“requiredAttributes”: {
“@class”: “java.util.HashMap”
},
“caseInsensitive”: false
},
“userProfileViewType”: “FLAT”,
“supportedGrantTypes”: [“java.util.HashSet”, [“authorization_code”]],
“supportedResponseTypes”: [“java.util.HashSet”, [“code”]],
“scopes”: [“java.util.HashSet”, [“openid”,“profile”,“email”,‘groups’,“roles”]],
“includeClaimsInIdToken”: true
}
The logs don't show anything unusual.
Have you ever encountered this problem?
Thank you
Best regards
Vallee Romain
Just add this :
cas.authn.oauth.session-replication.cookie.crypto.enabled=true
Now, i have to find how create à json service file to bring attributs to application.
Could someone provide me with an example of a JSON file that would work with OIDC? One that sends attributes?
Ray Bon
Sent: July 18, 2026 01:47
To: CAS Community <cas-...@apereo.org>
Cc: Vallee Romain <vallee...@gmail.com>
Subject: [cas-user] Re: OIDC with 7.3 and code
|
You don't often get email from vallee...@gmail.com.
Learn why this is important
|
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c45ceb63-1a05-4e22-a608-8e62519fc514n%40apereo.org.
Vallee Romain
Thanks for your configuration file.
I notice that the “openid” and “profile” scopes aren't returning any attributes.
In my application-side logs, only the email address is being logged.
Do I need to declare something?
Vallee Romain
My applications needed to receive the data in “flat” format.
Thank for all
Jonathon Taylor
cas.authn.oauth.core.user-profile-view-type=FLAT
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/eae0c4f9-7dd3-4e18-ba4f-0b465407b4ean%40apereo.org.
--