Repository navigation
Help with Spring Security adapters OAuthRequestAuthenticator - CheckStateCookie() #16983
Unanswered
taylorhuddleston
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Keycloak 20.0.3
Im having an issue when I open one chrome browser tab, then another tab(Not logging into either)... When i go back to the first browser tab and login i get a error 400 (INVALID_STATE_COOKIE).
I have hunted down in the keyclock spring adapters where it is setting this ERROR 400.
If i comment out the last "return challenge(400, OIDCAuthenticationError.Reason.INVALID_STATE_COOKIE, null)" See below Red ex. Everything works with no issues.. Can anyone explain the consequences for commenting this line out? Why does the class care if the current state is different? What is it there for? Im guessing to prevent malicious activity? any help would be awesome.
This is in the OAuthRequestAuthenticator Class
All reactions