[jira] [Resolved] (AIRAVATA-2504) When tried to logout from email verification getting an error

["Marcus Christie (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AIRAVATA-2504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcus Christie resolved AIRAVATA-2504.
---------------------------------------
    Resolution: Fixed

[~eroma_a],

The problem was that the Keycloak 'pga' client for realm 'new-mexico-state' wasn't configured with the correct redirect URIs.

It was configured with these redirect URIs:
* https://cia.nmsu.edu
* https://cia.nmsu.edu/callback-url

I added the following, correct redirect URIs:
* https://sciencegateway.nmsu.edu
* https://sciencegateway.nmsu.edu/callback-url

What happened is {{https://cia.nmsu.edu}} was probably entered into the gateway request. The Keycloak realm creation code will automatically populate the redirect URIs from this value. However, when it was actually deployed it had a different domain {{https://sciencegateway.nmsu.edu}}. 

*Whenever the domain of a gateway is different from what was provided in the gateway request at tenant creation time, we'll have to go into Keycloak and fix the redirect URIs.*

> When tried to logout from email verification getting an error
> -------------------------------------------------------------
>
>                 Key: AIRAVATA-2504
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2504
>             Project: Airavata
>          Issue Type: Bug
>          Components: Keycloak Authentication, PGA PHP Web Gateway
>    Affects Versions: 0.18
>         Environment: sciencegateway.nmsu.edu
>            Reporter: Eroma
>            Assignee: Marcus Christie
>             Fix For: 0.18
>
>
> 1. Created a new account in sciencegateway.nmsu.edu gateway
> 2. When the email verification email was received clicked the link and logged in to the gateway verify
> 3. Got the message that says "Your New Mexico State Science Gateway account is pending approval. You will be notified via email upo...."
> 4. Clicked logout and getting error screen with message 
> WE'RE SORRY ...
> Invalid redirect uri
> 5. URL of the error screen: https://iam.scigap.org/auth/realms/new-mexico-state/protocol/openid-connect/logout?redirect_uri=https%3A%2F%2Fsciencegateway.nmsu.edu



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)