Questions tagged [mod-auth-openidc]

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that authenticates users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating access tokens presented by OAuth 2.0 clients against an OAuth 2.0 Authorization Server.

90 questions
0
votes
2 answers

mod_auth_openidc error 400 Bad Request - too many cookies (?)

I have a container mapped by Nginx on example.org/portia/test, structured as follow: Container exposes only port 9001, where an Apache instance as proxy is listening. A Django server is running on 8000, all traffic for /api and /server_capabilities…
0
votes
1 answer

Missing Id_Token Spring Oauth2 Auth Server and mod_auth_openidc

I'm trying to get a Spring security authorization server to work for resources secured behind Apache2 running mod_open_idc. When I access my resource it redirects me to the login page, but after I login I get redirected to a page that says Error in…
0
votes
1 answer

mod_auth_openidc with Apache2.4 reverse proxy

I'm trying to setup SSO with OpenID for Centreon web app. Here is the architecture : Apache 2.4 (windows) with mod_auth_openidc 2.3.9 Centreon 2.8.17 I want only one vhost to authenticate through SSO so I added all the openidc conf to the…
Lark
  • 21
  • 10
0
votes
1 answer

Keycloak, mod_auth_openidc, and back-channel logout

Environment: Debian 8 mod_auth_openidc 2.3.9 Keycloak 4.4.0.Final Apache 2.4.10 Not sure whether this is a Keycloak or mod_auth_openidc question, but let's see where this takes us... I am trying to get back-channel logout working with the above…
bjlevine
  • 873
  • 1
  • 9
  • 23
0
votes
2 answers

How to pass user's claim to upstream layer using mod_auth_openidc?

I've successfully provisioned apache web server using mod_auth_openidc to protect our internal dashboards, using Auth0 and Google App Oauth, described in this documentation: -…
Agung Pratama
  • 3,666
  • 7
  • 36
  • 77
0
votes
2 answers

Keycloak with mod_auth_openidc, retriving code and id_token

I'm trying to configure Keycloak with mod_auth_openidc. I'm using Apache 2.4 and simple Java servlets/html pages. I have Keycloak authenticating a user and redirecting to the protected resource. Now, I would like to get access to the user profile.…
user1411018
  • 491
  • 1
  • 5
  • 12
0
votes
2 answers

How to retrieve version of a module on apache

We run httpd in a docker container on apache web server. Is there a command or script or any way to directly retrieve auth_openidc_module version used there. The module name is mod_auth_openidc.so. Any help here will be greatly appreciated as…
Ashley
  • 1,447
  • 3
  • 26
  • 52
0
votes
1 answer

Basic-style auth with mod_auth_openidc

Is there a way to configure mod_auth_openidc to act something like basic auth rather than redirecting to the auth provider (Okta, in my case) for login? I'm setting up mod_auth_openidc on a reverse proxy but I'm protecting APIs that are accessed by…
davgoo
  • 1
0
votes
1 answer

mod_auth_openidc OIDCProviderMetadataURL response in xml

Is there a way to configure mod_auth_openidc to use a OIDCProviderMetadataURL that returns in xml format?
Sumit
  • 1,661
  • 1
  • 13
  • 18
0
votes
0 answers

AD group based access using Ping OpenID Connect Scopes - mod_auth_openidc

We are integrating PingID Connect with our application, which is a Single Page App (SPA), the SPA "bundler" sits on a tomcat app server behind a apache reverse proxy, the apache reverse proxy also acts a proxy for all the API calls the app makes,…
0
votes
0 answers

sso session invalidation when using keycloak

I am using mod_auth_openidc in front of keycloak and it works great. There is one scenario where I am not sure what is the best way to handle. 1, user logs in to the application ( has a token ) via mod_auth_openidc applications use the locale…
Istvano
  • 992
  • 1
  • 12
  • 19
0
votes
1 answer

How to concat variables in apache

I'm working with apache module mod_auth_openidc. and i'm trying to concat some variables in order to send it to my application. OIDCScope "profile email openid offline_access" OIDCRemoteUserClaim sub AuthType openid-connect …
0
votes
1 answer

why we link LDAP Directory to Relaying Party (mod_auth_opendic)?

When we look to OpenidConnect flows, your solution does not match with. It's to The identity provider should make this EndUser Authentication with LDAP Directory , not the Relaying Party. "mod_auth_openidc" play the role of a Relaying Party not an…
isedrof
  • 33
  • 1
  • 9
0
votes
1 answer

How to read response from an authenticated api (Django) using angular4

I have tried to fetch data from an authenticated API which is developed in Django REST API Framework, Functionality used in the REST API(mod_auth_openidc), I need to call the same API to display the data in front end using angular4.…
arun
  • 145
  • 1
  • 17
-1
votes
1 answer

Connect to Azure AD from Apache web server on windows

I am trying to use Azure AD to authenticate a website in Apache web server deployed on a windows server. A possible solution we were looking for is mod_auth_openidc, however, it is not available for windows. Are there any other options that can be…
1 2 3 4 5
6