-
Type:
Bug
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 11.0.2
-
Component/s: oauth2
-
Labels:
-
Support Ticket IDs:
-
Verified Version/s:
Steps :
1. login to admin console
2. click [Access Control] -> realm -> [Authentication] -> "All Core Settings ..."
3. enable "Persistent Cookie Mode" setting
4. click "Save" button and logout
5. access login screen with "iPSPCookie=yes"
http://<host>:<port>/openam/UI/Login?realm=hr&iPSPCookie=yes
6. login and close browser without logging out.
7. access authorization page
http:///<host>:<port>/openam/oauth2/authorize?client_id=myClientID&scope=cn&redirect_uri=http%3A%2F%2F<host>%3A<port>%2Fopenam%2Foauth2c%2FOAuthProxy.jsp&response_type=code
8. with 11.0.x, you will get internal error
with 12.0.x, authorization page will be displayed, but when generating access code, it will use universalID instead of username.
- relates to
-
OPENAM-7260 OAuth2 authorization flow sets wrong resource owner if alias name + LDAP auth is used.
-
- Resolved
-