Check SSO not working

I’m trying to use

await keycloak.init({
     config: {
     url: 'url',
     realm: 'realm',
     clientId: clientId'
   },
   initOptions: {
      onLoad: 'check-sso',
      checkLoginIframe: false
   }
});

But it is still being redirected to login.

http://localhost:4200/#error=login_required&state=67f53f12-206c-44b9-83be-7eef7c982ce4

It also doesn’t work with the example provided.

[mauriciovigolo]

Hello @bpalermo,

Besides using onLoad: 'check-sso' you have to specify what url patterns must be excluded from the bearer interceptor, using the bearerExcludedUrls property.

So if you want to exclude the pages ending with main you have to use it:

await keycloak.init({
  config: {
    url: 'url',
    realm: 'realm',
    clientId: 'clientId'
  },
  initOptions: {
    onLoad: 'check-sso',
    checkLoginIframe: false
  },
  bearerExcludedUrls: [
    'main$'
  ]
});

The reason it redirects to the login page is that the KeycloakBearerInterceptor sends a request to renew the token and as the user is not authenticated it will be redirected to the login page.

About your comment:

Maybe provide a way to not register ‘KeycloakBearerInterceptor’ automatically.

In the next major version I will think about it. I will also improve the documentation to clarify some aspects of the library.

Thanks!

[Rebaiahmed]

Hello @bpalermo,

Besides using onLoad: 'check-sso' you have to specify what url patterns must be excluded from the bearer interceptor, using the bearerExcludedUrls property.

So if you want to exclude the pages ending with main you have to use it:

await keycloak.init({
  config: {
    url: 'url',
    realm: 'realm',
    clientId: 'clientId'
  },
  initOptions: {
    onLoad: 'check-sso',
    checkLoginIframe: false
  },
  bearerExcludedUrls: [
    'main$'
  ]
});

The reason it redirects to the login page is that the KeycloakBearerInterceptor sends a request to renew the token and as the user is not authenticated it will be redirected to the login page.

About your comment:

Maybe provide a way to not register ‘KeycloakBearerInterceptor’ automatically.

In the next major version I will think about it. I will also improve the documentation to clarify some aspects of the library.

Thanks!

What does mean main$, and bearerExcludedUrls: is to exclude from API call URLs or routing defined in angular-routes?