Repository navigation
Replies: 2 comments 1 reply
|
Hi everyone. I have a similar situation. I have a Keycloak 18.0.2 integrated to an external IdP (Okta / Ping). I see lots of IDENTITY_PROVIDER_LOGIN_ERROR / cookie_not_found in my login events. The steps to reproduce also are the same and also include stale sessions if they are between Session Idle and Session Max. In the client application the user is only able to access if he clears the browser cookies and cache. Any thoughts about this? |
|
My clue is that this error seems to be related to multiple use cases. In my case, changing the client application to handle "login_required" and "invalid session" and try to do a silent signin or do a signin redirect if signin silent fails. This seems do be effective. Does this make sense or is justa a workaround? In my use case the client application uses a oidc-client-ts lib. |
|
I have the same issue. Specifically, when a user doesn't have credentials, my app occasionally checks auth status in case the user authenticated externally. If this check happens while a user has the login page open, the user won't be able to complete auth. To reproduce:
I propose that the cookie not be cleared if Opened issue #11340 |
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
We are using Keycloak version 13.0.1 as an SSO system for our platforms. I assume that our main domain is abc.com, and all platforms are using subdomain xxxxx.abc.com. Currently, we are encountering an issue as below:
/openid-connect/authof (1) to check user state. As I can see now, since user is not in logged-in state, then the api clears authenticate session and make cookie KC_RESTART of (1) to be expired.So my question is: Is there any way to make api
/openid-connect/authNOT expire KC_RESTART cookie when user is not in logged-in state? or any way to re-init authentication session or KC_RESTART cookie when trying to login or any other way to make login can go through without any error for this case?The detail of APIs:
https://{{account.abc.com}}/auth/realms/{{real_name}}/protocol/openid-connect/auth?response_type=code&client_id={{client_id}}&state={{state}}&redirect_uri={{redirect_uri}}&scope=openid&code_challenge={{code_challenage}}&code_challenge_method=S256&nonce={{nonce}}&prompt=nonehttps://{{account.abc.com}}/auth/realms/{{real_name}}/login-actions/authenticate?session_code={{session_code}}&execution={{execution_code}}&client_id={{client_id}}&tab_id={{tab_id}}Please let me know if anything is not clear, so that I can explain further.
All reactions