Project

General

Profile

Actions

Bug #28086

closed

Show error on invalid oidc issuer

Added by Nikhil Kathole about 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Authentication
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

If a valid issuer is not provided in the Foreman settings, then there is no way a user can understand why SSO failed.

The method `valid_issuer?` in openid_connect.rb checks if a valid issuer is present or not. But if that fails authentication
flow ends with a error saying `SSO failed` but does not specify why.

Steps:
1) Provide a wrong issuer in the Foreman settings.
2) Try to login via SSO.

Reproducible:
Always


Related issues 2 (1 open1 closed)

Related to Foreman - Feature #25809: Keycloak integration with ForemanClosedRahul BajajActions
Related to Foreman - Tracker #28345: SSO using OpenID ConnectNewRahul Bajaj

Actions
Actions #1

Updated by Nikhil Kathole about 5 years ago

  • Category set to Authentication
Actions #2

Updated by Marek Hulán about 5 years ago

Actions #3

Updated by The Foreman Bot about 5 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/7190 added
Actions #4

Updated by The Foreman Bot almost 5 years ago

  • Fixed in Releases 2.0.0 added
Actions #5

Updated by Rahul Bajaj almost 5 years ago

  • Status changed from Ready For Testing to Closed
Actions #6

Updated by Tomer Brisker almost 5 years ago

  • Bugzilla link set to 1772029
Actions #7

Updated by Tomer Brisker almost 5 years ago

  • Fixed in Releases 1.24.0 added
  • Fixed in Releases deleted (2.0.0)
Actions #8

Updated by Rahul Bajaj almost 5 years ago

Actions

Also available in: Atom PDF