mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that authenticates users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating access tokens presented by OAuth 2.0 clients against an OAuth 2.0 Authorization Server.
Questions tagged [mod-auth-openidc]
90 questions
0
votes
2 answers
mod_auth_openidc error 400 Bad Request - too many cookies (?)
I have a container mapped by Nginx on example.org/portia/test, structured as follow:
Container exposes only port 9001, where an Apache instance as proxy is listening.
A Django server is running on 8000, all traffic for /api and /server_capabilities…
0
votes
1 answer
Missing Id_Token Spring Oauth2 Auth Server and mod_auth_openidc
I'm trying to get a Spring security authorization server to work for resources secured behind Apache2 running mod_open_idc. When I access my resource it redirects me to the login page, but after I login I get redirected to a page that says Error in…

cstack
- 395
- 1
- 15
0
votes
1 answer
mod_auth_openidc with Apache2.4 reverse proxy
I'm trying to setup SSO with OpenID for Centreon web app.
Here is the architecture :
Apache 2.4 (windows) with mod_auth_openidc 2.3.9
Centreon 2.8.17
I want only one vhost to authenticate through SSO so I added all the openidc conf to the…

Lark
- 21
- 10
0
votes
1 answer
Keycloak, mod_auth_openidc, and back-channel logout
Environment:
Debian 8
mod_auth_openidc 2.3.9
Keycloak 4.4.0.Final
Apache 2.4.10
Not sure whether this is a Keycloak or mod_auth_openidc question, but let's see where this takes us...
I am trying to get back-channel logout working with the above…

bjlevine
- 873
- 1
- 9
- 23
0
votes
2 answers
How to pass user's claim to upstream layer using mod_auth_openidc?
I've successfully provisioned apache web server using mod_auth_openidc to protect our internal dashboards, using Auth0 and Google App Oauth, described in this documentation:
-…

Agung Pratama
- 3,666
- 7
- 36
- 77
0
votes
2 answers
Keycloak with mod_auth_openidc, retriving code and id_token
I'm trying to configure Keycloak with mod_auth_openidc. I'm using Apache 2.4 and simple Java servlets/html pages. I have Keycloak authenticating a user and redirecting to the protected resource.
Now, I would like to get access to the user profile.…

user1411018
- 491
- 1
- 5
- 12
0
votes
2 answers
How to retrieve version of a module on apache
We run httpd in a docker container on apache web server. Is there a command or script or any way to directly retrieve auth_openidc_module version used there.
The module name is mod_auth_openidc.so.
Any help here will be greatly appreciated as…

Ashley
- 1,447
- 3
- 26
- 52
0
votes
1 answer
Basic-style auth with mod_auth_openidc
Is there a way to configure mod_auth_openidc to act something like basic auth rather than redirecting to the auth provider (Okta, in my case) for login?
I'm setting up mod_auth_openidc on a reverse proxy but I'm protecting APIs that are accessed by…

davgoo
- 1
0
votes
1 answer
mod_auth_openidc OIDCProviderMetadataURL response in xml
Is there a way to configure mod_auth_openidc to use a OIDCProviderMetadataURL that returns in xml format?

Sumit
- 1,661
- 1
- 13
- 18
0
votes
0 answers
AD group based access using Ping OpenID Connect Scopes - mod_auth_openidc
We are integrating PingID Connect with our application, which is a Single Page App (SPA), the SPA "bundler" sits on a tomcat app server behind a apache reverse proxy, the apache reverse proxy also acts a proxy for all the API calls the app makes,…

user1662554
- 1
- 1
0
votes
0 answers
sso session invalidation when using keycloak
I am using mod_auth_openidc in front of keycloak and it works great.
There is one scenario where I am not sure what is the best way to handle.
1, user logs in to the application ( has a token ) via mod_auth_openidc
applications use the locale…

Istvano
- 992
- 1
- 12
- 19
0
votes
1 answer
How to concat variables in apache
I'm working with apache module mod_auth_openidc. and i'm trying to concat some variables in order to send it to my application.
OIDCScope "profile email openid offline_access"
OIDCRemoteUserClaim sub
AuthType openid-connect
…

isedrof
- 33
- 1
- 9
0
votes
1 answer
why we link LDAP Directory to Relaying Party (mod_auth_opendic)?
When we look to OpenidConnect flows, your solution does not match with.
It's to The identity provider should make this EndUser Authentication with LDAP Directory , not the Relaying Party. "mod_auth_openidc" play the role of a Relaying Party not an…

isedrof
- 33
- 1
- 9
0
votes
1 answer
How to read response from an authenticated api (Django) using angular4
I have tried to fetch data from an authenticated API which is developed in
Django REST API Framework, Functionality used in the REST API(mod_auth_openidc), I need to call the same API to display the data in front end using angular4.…

arun
- 145
- 1
- 17
-1
votes
1 answer
Connect to Azure AD from Apache web server on windows
I am trying to use Azure AD to authenticate a website in Apache web server deployed on a windows server. A possible solution we were looking for is mod_auth_openidc, however, it is not available for windows.
Are there any other options that can be…

rest_day
- 858
- 2
- 13
- 28