Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

OIDC功能token接口请求体不正确 #2105

Open
5 tasks done
zzzz0317 opened this issue Feb 18, 2025 · 0 comments · May be fixed by #2106
Open
5 tasks done

OIDC功能token接口请求体不正确 #2105

zzzz0317 opened this issue Feb 18, 2025 · 0 comments · May be fixed by #2106
Labels
bug Something isn't working

Comments

@zzzz0317
Copy link

zzzz0317 commented Feb 18, 2025

例行检查

  • 我已确认目前没有类似 issue
  • 我已确认我已升级到最新版本 v0.6.10
  • 我已完整查看过项目 README,尤其是常见问题部分
  • 我理解并愿意跟进此 issue,协助测试和提供反馈
  • 我理解并认可上述内容,并理解项目维护者精力有限,不遵循规则的 issue 可能会被无视或直接关闭

问题描述

采用Zitadel作为服务端时,用户无法使用OIDC登录,提示“oidc id 为空”

调用token接口时,似乎应采用 urlencoded 格式发送数据,人工使用burpsuite工具改包获得了预期的响应

https://openid.net/specs/openid-connect-core-1_0.html#TokenRequest

The Client sends the parameters to the Token Endpoint using the HTTP POST method and the Form Serialization, per Section 13.2, as described in Section 4.1.3 of OAuth 2.0 [RFC6749].

复现步骤

配置Zitadel作为认证服务器

预期结果

使用 urlencoded 格式向 token 接口发送数据,用户正常登录

相关截图

Image

Image

Image

@zzzz0317 zzzz0317 added the bug Something isn't working label Feb 18, 2025
@zzzz0317 zzzz0317 linked a pull request Feb 18, 2025 that will close this issue
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant