[KNOX-1355] Knox not honoring originalUrl when pac4j federation is used

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Fix Version/s: 2.1.0
• Component/s: KnoxSSO
• Assignee: Unassigned
• Reporter: DIPAYAN BHOWMICK
• Created: 13/Jun/18 06:48
• Updated: 12/Nov/22 22:19

Description

I wanted to integrate Keycloak as the IdP provider for Knox using the pac4j federation. This is for an SSO scenario and not Knox Gateway proxy. So, requested to gateway/knoxsso/api/v1/websso?originalUrl=https://service.

After, the redirection happens to Keycloak and successful authentication knox rather than returning to the requested original URL, it is redirecting to the original requestedURL (ie. gateway/knoxsso/api/v1/websso?originalUrl=https://service/)

The complete Sequence diagram is attached. sequence_diagram.txt

Also, knoxsso.xml is attached as an example. knoxsso.xml