I have a similar question as in Format for 'openid connect authorize parameters' field .
Our Auth0 setup requires to add connection=123
to the authorize
endpoint. I tried several combinations of openid connect authorize parameters
without success.
So either please give me a working example or fix the bug - I have the impression that the given parameters are not routed through to the authorize request at all.
sam
(Sam Saffron)
21 באפריל, 2023, 5:01am
2
Looking at the code it looks like it needs to be in request params.
def authorize_params
super.tap do |params|
options[:passthrough_authorize_options].each do |k|
params[k] = request.params[k.to_s] unless [nil, ""].include?(request.params[k.to_s])
end
params[:claims] = options[:claims] if options[:claims].present?
params[:scope] = options[:scope]
session["omniauth.nonce"] = params[:nonce] = SecureRandom.hex(32)
options[:passthrough_token_options].each do |k|
session["omniauth.param.#{k}"] = request.params[k.to_s] unless [nil, ""].include?(
request.params[k.to_s],
)
end
end
end
Try using chrome dev tools, track all HTTP requests, are you certain this allow listed param is in the request params? This is just used to allow list stuff, not to hardcode a value.
If you need to hardcode a value a new feature would need to be built.
I don’t get it. The parameters are not added at all…
Alexander
(Alexander Barrios)
26 באפריל, 2023, 4:08pm
4
Happened to me on one occasion, adding the parameter directly in the authorize_url seems to do the trick
לייק 1
And how are you supposed to do this? The plugin only takes the discovery document:
plugins:
openid_connect_enabled:
default: false
openid_connect_discovery_document:
default: ""
openid_connect_client_id:
default: ""
openid_connect_client_secret:
default: ""
openid_connect_rp_initiated_logout:
default: false
openid_connect_rp_initiated_logout_redirect:
default: ""
openid_connect_allow_association_change:
default: false
openid_connect_overrides_email:
default: false
openid_connect_authorize_scope:
default: "openid"
openid_connect_verbose_logging:
default: false
openid_connect_token_scope:
default: ""
openid_connect_error_redirects:
default: ""
type: list
list_type: secret
openid_connect_authorize_parameters:
default: ""
type: list
list_type: compact
openid_connect_claims:
default: ""
textarea: true
openid_connect_match_by_email:
default: true
I switched to the Oauth2 Basic plugin. Problem solved.
system
(system)
נסגר ב־
27 במאי, 2023, 8:58am
7
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.