Re: [I] bug: authenticate(): request to the redirect_uri path but there's no session state found [apisix]

["trueg (via GitHub)" <gi...@apache.org>]

trueg commented on issue #3200:
URL: https://github.com/apache/apisix/issues/3200#issuecomment-2057141832

   For anyone struggling with this problem like I was after an entire days wasted:
   
   There is an undocumented configuration field "session.secret". As soon as I set this to a random value the problem went away. See below for an example:
   
   ```
   "plugins": {
       "openid-connect": {
         "bearer_only": false,
         "client_id": "whatever",
         "client_secret": "whatever-else",
         "discovery": "http://i.am.the.keycloak/auth/realms/myrealm/.well-known/openid-configuration",
         "realm": "myrealm",
         "session": {
           "secret": "MjMzZDFlYzAtN2Y3OC00M2MyLTg1OGYtZTk1NGVkZDEyZjZhCg=="
         }
       }
     }
   ```
   
   You can generate the secret string however you like, I used `uuidgen|base64`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org