OpenID Provider

[Marc Struminski]

Which OpenID providers other than KeyCloak are still supported?

UCS usesKopano b.v.

[Marc Struminski]

I get this error Message, when I want to LogIn.

D, [2023-02-28T10:50:26.031365 #118] DEBUG -- omniauth: (openid_connect) Request phase initiated.

I, [2023-02-28T10:50:34.750206 #118]  INFO -- : [6bd7c308-8ecc-4a7a-9b27-89bb215e92be] Started GET "/auth/openid_connect/callback?error=access_denied&error_description=invalid%20redirect_uri%3A%20https%3A%2F%2Fgl.bbb-test.koeln%2Fauth%2Fopenid_connect%2Fcallback&state=a98500a5976bcc85fd64abc599b63d36" for 212.117.80.84 at 2023-02-28 10:50:34 +0100
D, [2023-02-28T10:50:34.750931 #118] DEBUG -- omniauth: (openid_connect) Callback phase initiated.
E, [2023-02-28T10:50:34.751462 #118] ERROR -- omniauth: (openid_connect) Authentication failure! access_denied: OmniAuth::Strategies::OpenIDConnect::CallbackError, access_denied | invalid redirect_uri: https://gl.bbb-test.koeln/auth/openid_connect/callback
I, [2023-02-28T10:50:34.757815 #118]  INFO -- : [3e2231e1-d745-4cdc-ac58-f384e227e9cf] Started GET "/auth/failure?message=access_denied&origin=https%3A%2F%2Fgl.bbb-test.koeln%2F&strategy=openid_connect" for 212.117.80.84 at 2023-02-28 10:50:34 +0100
I, [2023-02-28T10:50:34.759682 #118]  INFO -- : [3e2231e1-d745-4cdc-ac58-f384e227e9cf] Processing by ComponentsController#index as HTML
I, [2023-02-28T10:50:34.760122 #118]  INFO -- : [3e2231e1-d745-4cdc-ac58-f384e227e9cf]   Parameters: {"message"=>"access_denied", "origin"=>"https://gl.bbb-test.koeln/", "strategy"=>"openid_connect", "path"=>"auth/failure"}
I, [2023-02-28T10:50:34.761119 #118]  INFO -- : [3e2231e1-d745-4cdc-ac58-f384e227e9cf]   Rendered components/index.html.erb within layouts/application (Duration: 0.0ms | Allocations: 6)
I, [2023-02-28T10:50:34.765759 #118]  INFO -- : [3e2231e1-d745-4cdc-ac58-f384e227e9cf]   Rendered layout layouts/application.html.erb (Duration: 4.7ms | Allocations: 1399)
I, [2023-02-28T10:50:34.766390 #118]  INFO -- : [3e2231e1-d745-4cdc-ac58-f384e227e9cf] Completed 200 OK in 6ms (Views: 4.8ms | ActiveRecord: 0.6ms | Allocations: 1644)

[ahmad....@blindsidenetworks.com]

All OpenID providers are supported. 

access_denied | invalid redirect_uri: https://gl.bbb-test.koeln/auth/openid_connect/callback

You need to add the URL above to your OpenId provider as a valid redirect

[Marc Struminski]

My Config (Redirect URL)

.env

https://gl.bbb-test.koeln/

OpenID

https://gl.bbb-test.koeln/*

Like your Example for Keycloak

[Marc Struminski]

Hello,

I changed the redirect URI to https://gl.bbb-test.koeln/auth/openid_connect/callback

When I try to log-in become this messages:

I, [2023-05-22T10:56:29.158227 #123]  INFO -- : [21103265-b59e-41df-affa-693276170ca8] Started POST "/auth/openid_connect" for 212.117.80.84 at 2023-05-22 10:56:29 +0200
D, [2023-05-22T10:56:29.159830 #123] DEBUG -- omniauth: (openid_connect) Request phase initiated.
I, [2023-05-22T10:56:38.121023 #123]  INFO -- : [dbb63cff-c469-4124-87d6-f0d8ed7c6dd3] Started GET "/auth/openid_connect/callback?code=QnwGMxlC4LrOHfgua5WHKD7rxpa_fTZd&scope=profile%20openid%20email&session_state=f8128454b5ad1211712b2443b19dd362fba8650a75316073d0f762f39386034b.B3tCFGd08ihCdOGLPPtz2U43gYgYqwcX8rpnm-sAMxw%3D&state=07de98e726b13709d9dc0e10c6d10889" for 212.117.80.84 at 2023-05-22 10:56:38 +0200
D, [2023-05-22T10:56:38.121679 #123] DEBUG -- omniauth: (openid_connect) Callback phase initiated.
E, [2023-05-22T10:56:40.488848 #123] ERROR -- omniauth: (openid_connect) Authentication failure! invalid_grant: Rack::OAuth2::Client::Error, invalid_grant :: code not found
I, [2023-05-22T10:56:40.498625 #123]  INFO -- : [0c27af57-0fc3-41c6-90c9-3e00f3b6db45] Started GET "/auth/failure?message=invalid_grant&origin=https%3A%2F%2Fgl.bbb-test.koeln%2F&strategy=openid_connect" for 212.117.80.84 at 2023-05-22 10:56:40 +0200
I,