[ZEPPELIN-3266] Unclear requirements for OIDC integration

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.8.0
• Component/s: security, zeppelin-server

Environment

MacOS 10.13.13

Java 1.8.0

shiro.version 1.4.0

pac4j.version 2.1.0

buji.version 3.0.0

• Assignee: Unassigned
• Reporter: Hielke Hoeve
• Created: 26/Feb/18 09:15
• Updated: 26/Feb/18 09:30

Description

I have been trying to get OIDC integration working. I have found the pull request ZEPPELIN-2598  and additional questions/bugs in this issue tracker and tried to figure out what Zeppelin needed.

I have use trial and error for several days to figure out which libraries are needed, as this is not documented anywhere! , and gotten as far as logging into Zeppelin. Unfortunately I am stuck at a Pac4j error because the state parameter is different from the one sent in authentication request. 

When reviewing the logs I can see that Zeppelin is creating 2 sessions, once for each page in the OIDC proces. Am I missing something in a configuration file?