geonetwork / geonetwork/core-geonetwork

Enabling HTTPS for Geonetwork 4.2.2 does not work with OAUTH2 OpenID Connect

Open
#6,947 16 comments 2 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
521
Forks
515
Avg merge
6d 13h
Merged PRs (30d)
19

Description

After successfully implemented the install of SSL certificates in the server, Geonetwork can now be accessed through https://domain/geonetwork

However, when clicking on the 'Sign in' button, an error is displayed on the screen showing the following URL:

`http://domain/geonetwork/login/oauth2/code/geonetwork-oicd`

So, the above URL is using **http** instead, not https, not sure why, or if this misconfiguration is causing the OpenID Connect to fail.

I have changed in the database the values for `system/server/port` and `system/server/protocol` but these ones do not seem to have any effect in the above error.

Besides, the parameter: `OPENIDCONNECT_IDTOKENROLELOCATION` not sure how to configure it, where could I find an example of this value?

Thanks,

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the HTTPS sign-in flow and inspect the generated OAuth2 callback URL, which the issue reports as using http instead of https. Review the GeoNetwork HTTPS and OpenID Connect configuration and determine how OPENIDCONNECT_IDTOKENROLELOCATION should be set. Done means the callback uses https and the role-location setting is documented with a working example.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.