Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

OIDC CodeAuthenticationMechanism does not work if the proactive authentication is disabled

See original GitHub issue

Describe the bug

Adding quarkus.http.auth.proactive=false breaks the OIDC adapter code flow (ex, adding this property to integration-tests/oidc-code-flow/..../application.properties breaks the tests) Reported originally at https://quarkusio.zulipchat.com/#narrow/stream/187030-users/topic/OIDC.20BearerAuthenticationMechanism.20for.20unproteced.20resources

Issue Analytics

State:
Created 3 years ago
Comments:13 (13 by maintainers)

Top GitHub Comments

1reaction

haraldatbmwcommented, Oct 22, 2020

Created a new issue https://github.com/quarkusio/quarkus/issues/12882

0reactions

haraldatbmwcommented, Oct 22, 2020

@sberyozkin I just tried the fix with Quarkus-1.9.0.Final. It works for the flow and the REST endpoints but breaks my unit-tests which are using the @TestSecurity(user = "harald") annotation. SecurityContext.getUserPrincipal() returns null.

My current workaround is %test.quarkus.http.auth.proactive=true but I don’t like it.

Top Results From Across the Web

OpenID Connect (OIDC) authorization code flow mechanism

The Authorization Code Flow mechanism authenticates users of your web application by redirecting them to an OIDC provider, such as Keycloak, to log...

How to access JWT in Quarkus when proactive auth is disabled?

I see 2 distinct problems in informations you added : You got to validate token (if proactive auth is disabled); You got to...

OpenID Connect authentication | Elasticsearch Guide [8.5]

It is specifically designed to support authentication via an interactive web browser, so it does not operate as a standard authentication realm. Instead,...

quarkusio/quarkus 1.9.0.CR1 on GitHub - NewReleases.io

... #12090 - OIDC CodeAuthenticationMechanism does not work if the proactive authentication is disabled; #12076 - AdditionalBeanBuildItem - clarify javadoc ...

How-to: Setup OIDC Authentication in Amundsen - Stemma

Please note that only setting up OIDC: does not enable User Profiles in Amundsen UI. does not ingest users in your database. If...