You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "arrowing (via GitHub)" <gi...@apache.org> on 2023/04/11 08:10:34 UTC
[GitHub] [apisix] arrowing opened a new issue, #9288: bug: accessing introspection endpoint timeout when using openid-connect plugin
arrowing opened a new issue, #9288:
URL: https://github.com/apache/apisix/issues/9288
### Current Behavior
1、log in system by apisix (oidc connect plugin) and keycloak (bearea only)
2、request resource first
3、it always return status code 401
4、a moment later, i request resources again and again, there are return code 200 in 99% and a little return code 401 likes step 3.
### Expected Behavior
It always return 200 when i log in system and request resources.
### Error Logs
[lua] openidc.lua:502: call_token_endpoint(): accessing introspection endpoint (http://*/realms/*/protocol/openid-connect/token/introspect) failed: timeout, client: *, server: _, request: "GET /api/oidc HTTP/1.1", host: "*", referrer: "*"
[lua] openid-connect.lua:275: phase_func(): OIDC introspection failed: accessing introspection endpoint (http://*/realms/*/protocol/openid-connect/token/introspect) failed: timeout, client: *, server: _, request: "GET / HTTP/1.1", host: "*", referrer: "*"
### Steps to Reproduce
as like Current Behavior
### Environment
- APISIX version (run `apisix version`): 2.14.1-alpine In Docker
- Operating system (run `uname -a`): Linux 3.10.0-693.2.2.el7.x86_64 #1 SMP Tue Sep 12 22:26:13 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] nic-6443 commented on issue #9288: bug: accessing introspection endpoint timeout when using openid-connect plugin
Posted by "nic-6443 (via GitHub)" <gi...@apache.org>.
nic-6443 commented on issue #9288:
URL: https://github.com/apache/apisix/issues/9288#issuecomment-1503127379
The meaning of this log is that when Apisix requested Keycloak, a timeout error occurred. Is it possible that your Keycloak service occasionally experiences request timeouts? You can try using tcpdump to record the network requests between Apisix and Keycloak to see if you can find these timed-out requests. Then look for the reason for the timeout in the Keycloak logs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] bug: accessing introspection endpoint timeout when using openid-connect plugin [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #9288:
URL: https://github.com/apache/apisix/issues/9288#issuecomment-1980500086
Due to lack of the reporter's response this issue has been labeled with "no response". It will be close in 3 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] bug: accessing introspection endpoint timeout when using openid-connect plugin [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #9288:
URL: https://github.com/apache/apisix/issues/9288#issuecomment-1987168214
This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] bug: accessing introspection endpoint timeout when using openid-connect plugin [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #9288: bug: accessing introspection endpoint timeout when using openid-connect plugin
URL: https://github.com/apache/apisix/issues/9288
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org