使用keyrock在spagobi上进行身份验证 [英] authentication on spagobi using keyrock

问题描述

我们在使用KeyRock作为身份验证提供程序的SpagoBI上进行身份验证时遇到了麻烦.我们在这里遵循了指南:

We're having troubles authenticating on SpagoBI using KeyRock as authentication provider. We followed the guide here:

http://spagobi.readthedocs.org/en/latest/admin/README/index.html

可以重定向到KeyRock，但是在输入用户凭据后，会出现错误消息: {"state": "None", "error": "invalid_redirect_uri"} (HTTP 400)

The redirection to KeyRock works, but after we enter the user credentials there is an error which says: {"state": "None", "error": "invalid_redirect_uri"} (HTTP 400)

KeyRock中的配置页面如下:

The configuration page in KeyRock looks like this:

键盘截图

我们只是复制了客户端ID，密码和oauth2.config.properties中所需的其他参数.

We've simply copied client id, secret and the other parameters required in the oauth2.config.properties.

注意:KeyRock的公共实例的默认URL是错误的，我们必须添加/oauth2才能使它们正常工作，可能它们是为早期版本的KeyRock准备的.

Note: the default urls for the public instance of KeyRock were wrong, we had to add /oauth2 to make them work, probably they were prepared for a previous version of KeyRock.

编辑30-03-2016

更多信息:

• 我们正在使用KeyRock的公共实例
• 我们正在使用私人 使用Docker部署在我们服务器上的SpagoBI实例 Docker Hub中可用的容器
• 这是我们的内容 oauth2.config.properties
• CLIENT_ID = 123456 SECRET = 123456 REDIRECT_URI = http://192.168.196.15:8080/SpagoBI/servlet/AdapterHTTP?PAGE=LoginPage&NEW_SESSION=TRUE TOKENS_URL = https://account.lab.fiware.org/api/v1/tokens.json APPLICATIONS_BASE_URL = https://account.lab.fiware.org/oauth2/applications/ AUTHORIZE_BASE_URL = https://account.lab.fiware.org/oauth2/authorize GET_ACCESS_TOKEN_URL = https://account.lab.fiware.org/oauth2/token GET_USER_INFO_URL = https://account.lab.fiware.org/oauth2/user APPLICATION_NAME = SpagoBI ADMIN_EMAIL = fiwarelab@email ADMIN_PASSWORD = fiwarelab@password
• 我们已经在地址中添加了/oauth2/部分，否则我们在重定向到KeyRock时会收到404错误.

• we're using the public instance of KeyRock
• we're using a private instance of SpagoBI deployed on our servers using the Docker container available in docker hub
• This is the the content of our oauth2.config.properties
• CLIENT_ID = 123456 SECRET = 123456 REDIRECT_URI = http://192.168.196.15:8080/SpagoBI/servlet/AdapterHTTP?PAGE=LoginPage&NEW_SESSION=TRUE TOKENS_URL = https://account.lab.fiware.org/api/v1/tokens.json APPLICATIONS_BASE_URL = https://account.lab.fiware.org/oauth2/applications/ AUTHORIZE_BASE_URL = https://account.lab.fiware.org/oauth2/authorize GET_ACCESS_TOKEN_URL = https://account.lab.fiware.org/oauth2/token GET_USER_INFO_URL = https://account.lab.fiware.org/oauth2/user APPLICATION_NAME = SpagoBI ADMIN_EMAIL = fiwarelab@email ADMIN_PASSWORD = fiwarelab@password
• We've add the /oauth2/ part in the addresses, otherwhise we would get a 404 error on the redirect to KeyRock.

推荐答案

您是对的:这些设置基于KeyRock的早期版本. 如果要使用KeyRock公共实例，则必须使用"5.1-fiware-all-in-one"泊坞窗文件，该文件是最新的. 请尝试其中的一个，让我知道.

You are right: those settings are based on a previous version of KeyRock. If you want to use the KeyRock public instance, you have to use the "5.1-fiware-all-in-one" docker file, that is more up-to-date. Please try with that one and let me know.

这篇关于使用keyrock在spagobi上进行身份验证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！