There is 1 comment.
 
 
OpenId Connect / cid:jira-generated-image-avatar-edbd1408-c03c-42fd-b00e-17800a897b60 OIDC-179 Open

Cannot login when the user is a member of too many groups

 
View issue   ยท   Add comment
 

1 comment

 
cid:jira-generated-image-avatar-20d8615b-44cc-49a8-8f26-59a05106a5cb Thomas Mortagne on 07/Jun/24 18:12
 

No call is sent to KeyCloak that I can see (Keycloak on debug mode does not tell me a call was made at all).

Not sure what to tell you. The error you pasted ("info:null") is the response of the request sent to Keycloak on https://github.com/xwiki-contrib/oidc/blob/5117e91353a739f31b93dc0cf2dce0a4203c84e3/oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManager.java#L188 (the one asking for the userinfo to Keycloak with the access token). In any case, the authenticator is not storing the access token or the id token (it just keep them in the session, so the size is not really a problem in any way). Maybe there is a bug in the oidc library we are using, but I would expect it to produce an exception in that case and not return a response as if the server had answered to it.

which are included in the access token

Note that this does not really make any sense from OIDC point of view, that's not what an access token is for (its main point is to be sent with the userinfo request). User information can also be found on the id token (maybe that's what you meant?), but it's usually more when you use the implicit flow and not the default core flow, which relies on the userinfo for this kind of stuff.