[GUACAMOLE-840] Open ID connect Guacamole integration Error

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: 1.0.0
• Component/s: guacamole-auth-openid
• Environment: ubuntu 16.04
• Flags: Patch, Important
• Assignee: Unassigned
• Reporter: Ram Prashath
• Created: 12/Jul/19 09:18
• Updated: 18/Jul/19 06:03
• Resolved: 12/Jul/19 12:47

Description

i've tried to get this setup. Unfortunately it seems Okta insist (even with Single Page App (SPA)) to have state field in the POST even if (when using SPA) it's not actually used. The guacamole client just goes in a redirect loop with error in URL visible of "invalid state".

With SPA the state parameter can even be some random letters, but must be there. Using OIDCDebugger.com gleans this:{quote}

error=invalid_state
error_description=The authentication request has an invalid state parameter.

 

Issue Links

• duplicates: GUACAMOLE-560 Include "state" parameter in OpenID Connect authorization request