You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Here will be tried to decode the access_token when it exists.
This only works when the access_token is a JWT like in Keycloak, but the format of the access_token is not defined in the RFC and can be everything also a random alphanumeric string and then it fails.
When I remove the special code for Keycloak, it works like expected
Normally I don't work with Ruby, so perhaps I didn't understand the code correct and the real reason is on another location, but for me it looks very logical.
The text was updated successfully, but these errors were encountered:
When you use groups in the Plugin Configuration and the receiving access_token is not a JWT the login fails, see logs and screenshot.
When you don't use the groups, everything works.
I think the reason is written here: oic_session.rb
Here will be tried to decode the access_token when it exists.
This only works when the access_token is a JWT like in Keycloak, but the format of the access_token is not defined in the RFC and can be everything also a random alphanumeric string and then it fails.
When I remove the special code for Keycloak, it works like expected
Normally I don't work with Ruby, so perhaps I didn't understand the code correct and the real reason is on another location, but for me it looks very logical.
The text was updated successfully, but these errors were encountered: