Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OIDC 插件不起作用 #1661

Open
1 task
Japson0 opened this issue Jan 10, 2025 · 0 comments
Open
1 task

OIDC 插件不起作用 #1661

Japson0 opened this issue Jan 10, 2025 · 0 comments

Comments

@Japson0
Copy link

Japson0 commented Jan 10, 2025

If you are reporting any crash or any potential security issue, do not
open an issue in this repo. Please report the issue via ASRC(Alibaba Security Response Center) where the issue will be triaged appropriately.

  • I have searched the issues of this repository and believe that this is not a duplicate.

Ⅰ. Issue Description

我启用OIDC后,发现不起作用,打开插件日志后出现以下日志

2025-01-10T07:35:15.950839Z	warning	envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1390	wasm log: [oidc] parse rule config failed: invalid configuration:
  missing setting: cookie-secret
  provider missing setting: client-id
  missing setting: client-secret or client-secret-file	thread=47
2025-01-10T07:35:15.950876Z	error	envoy wasm external/envoy/source/extensions/common/wasm/wasm.cc:151	Wasm VM failed Failed to configure base Wasm plugin	thread=47

这是我的OIDC插件配置

client_id: "aaa"
client_secret: "lxxabzH5qroDMVI5G0enMiGtaPw8oWRg"
match_list:
- match_rule_path: "/test"
  match_rule_type: "prefix"
match_type: "blacklist"
oidc_issuer_url: "http://127.0.0.1:8084/realms/master"
redirect_url: "http://foo.bar.com/oauth2/callback"
scope: "openid email offline_access"
service_name: "keycloak.static"
service_port: 80
service_host: http://127.0.0.1:8084/
  • Higress version: 2.0.5
  • OS : K8S
  • Others:
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant