alist icon indicating copy to clipboard operation
alist copied to clipboard
verified publisher icon alist-org

OIDC Auth respond a simple Page with error js

Open finalparanoia opened this issue 1 year ago • 2 comments

Please make sure of the following things

  • [X] I have read the documentation. 我已经阅读了文档。

  • [X] I'm sure there are no duplicate issues or discussions. 我确定没有重复的issue或讨论。

  • [X] I'm sure it's due to AList and not something else(such as Network ,Dependencies or Operational). 我确定是AList的问题，而不是其他原因（例如网络，依赖或操作）。

  • [X] I'm sure this issue is not fixed in the latest version. 我确定这个问题在最新版本中没有被修复。

AList Version / AList 版本

v3.32.0

Driver used / 使用的存储驱动

local

Describe the bug / 问题描述

当进行OIDC认证登录时，进行认证后，会跳转到一个空白页面，无法正常进行授权。

通过开发者工具查阅，可知alist返还了形如：

			<head></head>
			<body>
			<script>
			window.opener.postMessage({"token":"{{省略令牌}}"}, "*")
			window.close()
			</script>
			</body>

的简单网页，并且console报告window.opener.postMessage函数出错

将token手动填写入cookie中的token项后刷新即可完成登录并正常使用。

Reproduction / 复现链接

实例部署于内网，无法提供

Config / 配置

{ "force": false, "site_url": "", "cdn": "", "jwt_secret": "省略", "token_expires_in": 48, "database": { "type": "sqlite3", "host": "", "port": 0, "user": "", "password": "", "name": "", "db_file": "data/data.db", "table_prefix": "x_", "ssl_mode": "", "dsn": "" }, "meilisearch": { "host": "http://localhost:7700", "api_key": "", "index_prefix": "" }, "scheme": { "address": "0.0.0.0", "http_port": 5244, "https_port": -1, "force_https": false, "cert_file": "", "key_file": "", "unix_file": "", "unix_file_perm": "" }, "temp_dir": "data/temp", "bleve_dir": "data/bleve", "dist_dir": "", "log": { "enable": true, "name": "data/log/log.log", "max_size": 10, "max_backups": 5, "max_age": 28, "compress": false }, "delayed_start": 0, "max_connections": 0, "tls_insecure_skip_verify": true, "tasks": { "download": { "workers": 5, "max_retry": 1 }, "transfer": { "workers": 5, "max_retry": 2 }, "upload": { "workers": 5, "max_retry": 0 }, "copy": { "workers": 5, "max_retry": 2 } }, "cors": { "allow_origins": [ "" ], "allow_methods": [ "" ], "allow_headers": [ "*" ] } }

Logs / 日志

[GIN] 2024/03/20 - 16:38:37 | 200 | 143.549µs | 10.42.0.1 | GET "/@login?redirect=%2F" [GIN] 2024/03/20 - 16:38:37 | 200 | 825.38µs | 10.42.0.1 | GET "/api/public/settings" [GIN] 2024/03/20 - 16:38:40 | 200 | 137.17µs | 10.42.0.1 | GET "/" [GIN] 2024/03/20 - 16:38:41 | 200 | 75.447µs | 10.42.0.1 | GET "/api/public/settings" [GIN] 2024/03/20 - 16:38:41 | 200 | 382.74µs | 10.42.0.1 | GET "/api/me" [GIN] 2024/03/20 - 16:38:41 | 200 | 147.174µs | 10.42.0.1 | GET "/assets/Layout.7bf6e35a.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 26.86µs | 10.42.0.1 | GET "/assets/index.6e7284c8.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 25.81µs | 10.42.0.1 | GET "/assets/FolderTree.bc0bb1c2.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 105.442µs | 10.42.0.1 | GET "/assets/index.1c00cb52.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 22.511µs | 10.42.0.1 | GET "/api/public/offline_download_tools" [GIN] 2024/03/20 - 16:38:41 | 200 | 214.804µs | 10.42.0.1 | POST "/api/fs/get" [GIN] 2024/03/20 - 16:38:41 | 200 | 191.666µs | 10.42.0.1 | POST "/api/fs/list" [GIN] 2024/03/20 - 16:38:41 | 200 | 39.242µs | 10.42.0.1 | GET "/assets/index.1aed234b.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 86.342µs | 10.42.0.1 | GET "/assets/icon.fd054932.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 333.656µs | 10.42.0.1 | GET "/assets/Folder.0acc51cd.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 156.688µs | 10.42.0.1 | GET "/assets/Folder.b511ba9e.css" [GIN] 2024/03/20 - 16:38:41 | 200 | 978.075µs | 10.42.0.1 | GET "/assets/video_box.a8c20856.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 55.037µs | 10.42.0.1 | GET "/assets/commonjs-dynamic-modules.30ae7933.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 873.802µs | 10.42.0.1 | GET "/assets/Paginator.9b0a5d12.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 78.895µs | 10.42.0.1 | GET "/assets/index.2965be06.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 50.397µs | 10.42.0.1 | GET "/assets/helper.e1241295.js" [GIN] 2024/03/20 - 16:38:41 | 200 | 76.937µs | 10.42.0.1 | GET "/assets/List.9482e44b.js" [GIN] 2024/03/20 - 16:38:52 | 200 | 173.244µs | 10.42.0.1 | GET "/api/me" [GIN] 2024/03/20 - 16:38:52 | 200 | 247.404µs | 10.42.0.1 | GET "/assets/index.2d8bd5d3.js" [GIN] 2024/03/20 - 16:38:52 | 200 | 164.617µs | 10.42.0.1 | GET "/assets/Profile.83b1c34c.js" [GIN] 2024/03/20 - 16:38:54 | 200 | 50.759µs | 10.42.0.1 | GET "/assets/About.f36b9191.js" [GIN] 2024/03/20 - 16:39:08 | 302 | 25.642204ms | 10.42.0.1 | GET "/api/auth/sso?method=sso_get_token" [GIN] 2024/03/20 - 16:39:09 | 200 | 47.726814ms | 10.42.0.1 | GET "/api/auth/sso_callback?code=authelia_ac_&iss=https%3A%2F%2F&method=sso_get_token&scope=openid+profile&state=" [GIN] 2024/03/20 - 16:39:13 | 302 | 2.275932ms | 10.42.0.1 | GET "/api/auth/sso?method=sso_get_token" [GIN] 2024/03/20 - 16:39:20 | 200 | 91.367151ms | 10.42.0.1 | GET "/api/auth/sso_callback?code=authelia_ac_&iss=https%3A%2F%2F****&method=sso_get_token&scope=openid+profile&state=****" [GIN] 2024/03/20 - 16:43:45 | 200 | 359.602µs | 10.42.0.1 | GET "/api/admin/setting/list?group=1"

finalparanoia avatar Mar 20 '24 16:03 finalparanoia

See

  1. 59% #1631

github-actions[bot] avatar Mar 20 '24 16:03 github-actions[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar May 04 '24 00:05 stale[bot]

Hello @, this issue was closed due to inactive more than 52 days. You can reopen or recreate it if you think it should continue. Thank you for your contributions again.

github-actions[bot] avatar May 15 '24 00:05 github-actions[bot]