尝试通过AWS Application Load Balancer和Cognito进行身份验证时出现500错误 [英] 500 error trying to authenticate via AWS Application load balancer and Cognito

问题描述

我正在尝试使用面向AWS的面向应用程序的Internet负载均衡器为某些路由设置身份验证。

I am trying to setup Authentication for some certain routes using AWS internet-facing Application load balancer.

我已经完成了AWS官方文档中的所有步骤，并也使用这个：
https：// www .thorntech.com / 2018/09 / user-authentication-alb-cognito /

I've done all the steps from the official AWS documentation, and also using this one: https://www.thorntech.com/2018/09/user-authentication-alb-cognito/

我正在通过负载均衡器的DNS名称进行测试，它可以正确地重定向我到Cognito的登录表单，但是在我登录后，它将重定向到负载均衡器，并显示 500 Internal Server Error 。 URL就像这样 https：//xxxxx.eu-west -1.elb.amazonaws.com/oauth2/idpresponse?code= .......

I was testing via load balancer's DNS name, and it redirects me properly to the login form of Cognito, but after I am logged in it redirects to the load balancer, and it gives 500 Internal Server Error. URL is like so https://xxxxx.eu-west-1.elb.amazonaws.com/oauth2/idpresponse?code=.......

您知道吗，这可能是原因

Do you know, which can be the causes of it, and what should I configure else to make it working?

openid 是允许的

推荐答案

要回答我自己的问题-问题在于安全组。
您必须在负载均衡器上拥有一个带有开放端口443的安全组！

To answer my own question - the problem is with the security groups. You have to have a security group with the open port 443 on your load balancer!

这篇关于尝试通过AWS Application Load Balancer和Cognito进行身份验证时出现500错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！