OpenID Connect Provider error: Error in handling response type. #1181
Unanswered
Rodlee955i
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi, hoping someone can help with this code flow issue. My apache server is protecting /protected with the settings in httpd.conf shown below.This config works with Implicit Flow but not Code Flow. The IDP has tested manually using postman with the apache authentication code request, client id and secret, and the code flow process completes by returning the access token on their debug and testing page. But Apache does not seem to get the access token when left to itself. Is there something I have missed in the config that's needed for code flow but not implicit flow?
Httpd.conf
<Location "/protected">
AuthType openid-connect
Require valid-user
Browser Error
Error:
OpenID Connect Provider error: Error in handling response type.
Opendic log error
[Mon Feb 19 10:57:32.361068 2024] [auth_openidc:debug] [pid 64185:tid 140121006532352] src/proto.c(2688): [client x.x.x.x:59770] oidc_proto_validate_code_response: enter, referer: https://login.microsoftonline.com/
[Mon Feb 19 10:57:32.361087 2024] [auth_openidc:error] [pid 64185:tid 140121006532352] [client x.x.x.x:59770] oidc_proto_validate_code_response: requested flow is "code" but no "access_token" parameter found in the code response, referer: https://login.microsoftonline.com/
[Mon Feb 19 10:57:32.361092 2024] [auth_openidc:error] [pid 64185:tid 140121006532352] [client x.x.x.x:59770] oidc_proto_resolve_code_and_validate_response: code response validation failed, referer: https://login.microsoftonline.com/
[Mon Feb 19 10:57:32.361148 2024] [authz_core:debug] [pid 64185:tid 140121006532352] mod_authz_core.c(820): [client x.x.x.x:59770] AH01626: authorization result of Require valid-user : granted, referer: https://login.microsoftonline.com/
[Mon Feb 19 10:57:32.361155 2024] [authz_core:debug] [pid 64185:tid 140121006532352] mod_authz_core.c(820): [client x.x.x.x:59770] AH01626: authorization result of : granted, referer: https://login.microsoftonline.com/
Beta Was this translation helpful? Give feedback.
All reactions