Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
1.2k views
in Technique[技术] by (71.8m points)

single sign on - Got Stucked in Rstudio Rserver Pro 1.4 pro version while doing SSO using OpenID Connect with cognito IDP?

In /etc/rstudio/rserver.conf I think following the fixed setting.

auth-openid-issuer=https://op.example.com

Which will run the json file from https://op.example.com/.well-known/openid-configuration.json. Is it possible to change to a different URL (domain) of "issuer" in openid-configuration.json? I want to display the login screen created by me.

Here authorization_endpoint is running a different API Gateway domain than Idp. Therefore, opennid-configuration.json refers to a domain different from Idp. I would like to separate it from issuer on the Idp side.

When I tried to separate It than i got a log like follows :-

18 Jan 2021 07:07:23 [rserver-monitor] ERROR 18 Jan 2021 07:07:23 [rserver] ERROR OpenID failed with error: oidc: id token issued by a different provider, expected "https://op.example.com" got "https://cognito-idp.ap-northeast-1.amazonaws.com/ap-northeast-1_XXXXXXXX"; LOGGED FROM: void rstudio::server::openid_auth::{anonymous}::writeResponse(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>, const rstudio::core::http::Response&) src/cpp/server/openid_auth/ServerOpenIDAuth.cpp:147|||
18 Jan 2021 07:07:23 [rserver-monitor] ERROR 18 Jan 2021 07:07:23 [rserver] ERROR rserver-openid: OpenID handling error trying to obtaining id token: oidc: id token issued by a different provider, expected "https://op.example.com" got "https://cognito-idp.ap-northeast-1.amazonaws.com/ap-northeast-1_XXXXXXXX"; LOGGED FROM: void rstudio::server::ProcessMonitor::onProcessStderr(rstudio::server::ProcessMonitor::Process, const string&) src/cpp/server/ServerProcessMonitor.cpp:247|||

I had tried to do it in diferent way but failed . I also asked cognito if I could change ID token Url but Cognito doesn`t allows that.

I hope I get helped here .


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)
等待大神答复

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...