Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TT-12175 Provider selection behavior change in >v1.1.1 #279

Open
sarnowski23 opened this issue Apr 24, 2023 · 0 comments
Open

TT-12175 Provider selection behavior change in >v1.1.1 #279

sarnowski23 opened this issue Apr 24, 2023 · 0 comments
Assignees
Labels

Comments

@sarnowski23
Copy link

sarnowski23 commented Apr 24, 2023

Branch/Environment

  • Tag: >v1.1.1
  • Environment: Kubernetes

Describe the bug
After v1.1.1, attempting to access tib openid-connect provider fails with {"Status":"error","Error":"you must select a provider"}.

Reproduction steps
Steps to reproduce the behavior:
Profiles.json:

[{
  "ID": "keycloak",
  "OrgID": "<orgid>",
  "ActionType": "GenerateOrLoginUserProfile",
  "Type": "redirect",
  "ProviderName": "SocialProvider",
  "ProviderConfig": {
      "CallbackBaseURL": "https://tib.<domain>",
      "FailureRedirect": "https://tyk.<domain>/?fail=true",
      "UseProviders": [
      {
          "DiscoverURL": "https://keycloak.<domain>/auth/realms/<realm>/.well-known/openid-configuration",
          "Key": "<client_name>",
          "Name": "openid-connect",
          "Scopes": [
          "openid",
          "email"
          ],
          "Secret": "<secret>",
          "SkipUserInfoRequest": false
      }
      ]
  },
  "ReturnURL": "https://tyk.<domain>/tap",
  "SSOOnlyForRegisteredUsers": false
}]

Access url:
https://tib.<domain>/auth/keycloak/openid-connect

Actual behavior
I have a client configured in keycloak and accessing via the access url noted above works correctly (redirecting to keycloak and then back to tyk authenticated) on image version v1.1.1. On v1.2.1 and above (1.2.0 is just broken yielding exec format error and crashing on startup) this yields an error '{"Status":"error","Error":"you must select a provider"}'. My provider setup is as documented here.

Expected behavior
I'd expect provider selection to work as before, or documentation indicating the new pattern.

Additional context
Running in an EKS cluster. Tyk deployed with official helm charts: https://github.com/TykTechnologies/tyk-helm-chart/tree/master/tyk-pro v0.14.0, previously v0.13.2.

@caroltyk caroltyk changed the title Provider selection behavior change in >v1.1.1 TT-12175 Provider selection behavior change in >v1.1.1 May 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants