Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OIDC功能token接口请求体不正确 #2105

Open
5 tasks done
zzzz0317 opened this issue Feb 18, 2025 · 0 comments · May be fixed by #2106
Open
5 tasks done

OIDC功能token接口请求体不正确 #2105

zzzz0317 opened this issue Feb 18, 2025 · 0 comments · May be fixed by #2106
Labels
bug Something isn't working

Comments

@zzzz0317
Copy link

zzzz0317 commented Feb 18, 2025

例行检查

  • 我已确认目前没有类似 issue
  • 我已确认我已升级到最新版本 v0.6.10
  • 我已完整查看过项目 README,尤其是常见问题部分
  • 我理解并愿意跟进此 issue,协助测试和提供反馈
  • 我理解并认可上述内容,并理解项目维护者精力有限,不遵循规则的 issue 可能会被无视或直接关闭

问题描述

采用Zitadel作为服务端时,用户无法使用OIDC登录,提示“oidc id 为空”

调用token接口时,似乎应采用 urlencoded 格式发送数据,人工使用burpsuite工具改包获得了预期的响应

https://openid.net/specs/openid-connect-core-1_0.html#TokenRequest

The Client sends the parameters to the Token Endpoint using the HTTP POST method and the Form Serialization, per Section 13.2, as described in Section 4.1.3 of OAuth 2.0 [RFC6749].

复现步骤

配置Zitadel作为认证服务器

预期结果

使用 urlencoded 格式向 token 接口发送数据,用户正常登录

相关截图

Image

Image

Image

@zzzz0317 zzzz0317 added the bug Something isn't working label Feb 18, 2025
@zzzz0317 zzzz0317 linked a pull request Feb 18, 2025 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant