geonetwork / geonetwork/core-geonetwork
Enabling HTTPS for Geonetwork 4.2.2 does not work with OAUTH2 OpenID Connect
- Dominant language
- Java
- Stars
- 521
- Forks
- 515
- Avg merge
- 6d 13h
- Merged PRs (30d)
- 19
Description
After successfully implemented the install of SSL certificates in the server, Geonetwork can now be accessed through https://domain/geonetwork
However, when clicking on the 'Sign in' button, an error is displayed on the screen showing the following URL:
`http://domain/geonetwork/login/oauth2/code/geonetwork-oicd`
So, the above URL is using **http** instead, not https, not sure why, or if this misconfiguration is causing the OpenID Connect to fail.
I have changed in the database the values for `system/server/port` and `system/server/protocol` but these ones do not seem to have any effect in the above error.
Besides, the parameter: `OPENIDCONNECT_IDTOKENROLELOCATION` not sure how to configure it, where could I find an example of this value?
Thanks,
Contributor guide
Research direction
Start by reproducing the HTTPS sign-in flow and inspect the generated OAuth2 callback URL, which the issue reports as using http instead of https. Review the GeoNetwork HTTPS and OpenID Connect configuration and determine how OPENIDCONNECT_IDTOKENROLELOCATION should be set. Done means the callback uses https and the role-location setting is documented with a working example.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100