Questions tagged [lua-resty-openidc]

13 questions
5
votes
2 answers

Openidc with Keycloak error uthenticate(): request to the redirect_uri_path but there's no session state found, client

I am using Openresty as a server. I have the configuration file of the nginx as per the https://eclipsesource.com/blogs/2018/01/11/authenticating-reverse-proxy-with-keycloak/. I am getting following error "openidc.lua:1053: authenticate(): request…
4
votes
1 answer

Authenticate websocket with keycloak through openresty

Currently I have a working solution with following components: Webserver with custom application Openresty with lua Keycloak This allows me to authenticate using keycloak. Because my webserver also exposes a websocket host, I would like to…
2
votes
0 answers

runtime error: /usr/local/share/lua/5.1/resty/session.lua:183: loop or previous error loading module 'resty.session.ciphers.aes'

This is the error i am getting lua entry thread aborted: runtime error: /usr/local/share/lua/5.1/resty/session.lua:183: loop or previous error loading module 'resty.session.ciphers.aes' stack traceback: coroutine 0: [C]: in function…
TVN
  • 21
  • 1
2
votes
1 answer

Is it possible to implement OIDC in front of Nginx Stream with OpenResty?

I would like to know if it is possible to use the OpenResty OIDC module as an authentication proxy within an NGINX stream configuration. (I don't have acccess to NGINX Plus unfortunately) I have used NGINX with Stream configurations in the past to…
2
votes
3 answers

How do I redirect back to the home page after authentication

I am trying to configure lua-resty-openidc on an NGINX server. How can I redirect back to the Home page once the user is authenticated? When the user is authenticated the callback url is getting the code, session_state and other parameters from the…
1
vote
1 answer

OIDC reverse proxy sidecar in kubernetes

I'm trying to secure java applications on kubernetes. For a simple Springboot app with permitAll, I choose openresty (nginx) with lua-resty-openidc as reverse proxy. One example that illustrates mostly what I'm trying to do :…
1
vote
1 answer

Trigger openidc authentication based on status code of upstream

I'm using lua-resty-openidc to implement a web UI that sits in front of my backend system. The backend provides a REST API, protected by an Authorization header containing a JWT. The frontend manages a session, and sends web users to an Identity…
mamacdon
  • 2,077
  • 1
  • 13
  • 14
1
vote
1 answer

Pass custom parameters with the authorization request using lua-resty-openidc

I'm using lua-resty-openidc to configure NGINX as an OIDC RP with my Authorization Server. My requirement is to pass a value from the initial request coming to the Nginx (from the browser, let's say a query param), in the authorization code request…
sathya
  • 428
  • 4
  • 15
0
votes
0 answers

Session timeout / session end with lua-resty-openidc in Openresty and Keycloak

I am trying to configure lua-resty-openidc with an OpenResty NGINX server. Using the authentication for a website. Does anybody know, if I can let the session end or force the client to refresh the token? I tested by ending a session within the…
0
votes
1 answer

Openresty: Manually refreshing the id token without refreshing the session token?

I was looking at the readme at https://github.com/zmartzone/lua-resty-openidc and I saw that there was a refresh_session_interval option which supposedly "refreshes the users id_token after X seconds without requiring re-authentication". This works…
Emily
  • 15
  • 2
0
votes
0 answers

Nexus shows "Repository path must have another '/' after initial '/' when downloading with cURL

i run my Nexus OSS 3.14.0-04 behind a nginx reverse proxy which does authentication with nginx. With help of the nginx server we do an authentication via OpenID Connect as described here which works like a charm. Now we want to access Nexus via…
0
votes
1 answer

How to add multiple access_by_lua_file directive under same location = /_sample

Using openidc module introspection under location and calling using below, Policy section # location = /_sample { internal; set $api_name "sample"; access_by_lua_file /etc/nginx/path/oauth_introspection.lua; Proxypass...... } Now…
Satscreate
  • 305
  • 2
  • 16
0
votes
1 answer

Not able to configure OIDC with lua nginx

Am following below blog (https://developers.redhat.com/blog/2018/10/08/configuring-nginx-keycloak-oauth-oidc/) to setup an NGINX lua oidc. Below is my installation and setup, am unable to run below commands Install all the Lua modules using…
Satscreate
  • 305
  • 2
  • 16