172 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
-4
votes
1
answer
51
views
What are the consequences of using pac4j-oidc v6, which depends on spring-core? [closed]
I noticed that starting from version 6.0.0, pac4j-oidc has a dependency on spring-core.
What consequences will this have for my project (Java 17 + Hibernate 5 + Tomcat 9) if I start using pac4j-oidc ...
1
vote
1
answer
53
views
How does pac4j handle existing profiles vs client list in DefaultSecurityLogic
I’m using pac4j 6.2.2 in a Play app and trying to understand how authentication works with multiple clients. Here’s a minimal example:
import org.pac4j.play.java.Secure;
import play.mvc.*;
public ...
0
votes
1
answer
64
views
Default URL redirection after login
When logging in with a FormClient how can I change the default URL I get redirected to ?
It seems to be "/" by default. Is this the same thing as "callback URL" ?
0
votes
1
answer
37
views
pac4j: Bad parameters type
I get the following exception when trying to authenticate a Rest call.
<pac4j.version>6.2.1</pac4j.version>
<jakartaee-pac4j.version>8.0.1</jakartaee-pac4j.version>
Any ...
0
votes
1
answer
70
views
play-pac4j: keep track of active sessions
What's the difference between PlayCacheSessionStore and PlayCookieSessionStore. I mean I understand that one stores data with play cache and the other stores data in cookie but I'm not sure to ...
1
vote
1
answer
31
views
Play Pac4j latest version overriding response headers
I have noticed that the Cache-Control header I set in the controller is getting overridden to no-cache, no-store, max-age=0, must-revalidate by the org.pac4j.play.java.SecureAction#internalCall This ...
0
votes
1
answer
45
views
Pac4j prints access token at DEBUG level — is this safe?
I’m using Pac4j version 5.4.4, and I noticed that sensitive credential information like the access token is being printed at DEBUG level logging.
In particular, in DefaultCallbackLogic.java, there is ...
0
votes
1
answer
28
views
Pac4j SAML FileNotFoundException in Docker Container after Migration
I am migrating a Spring Boot application to new versions of Spring and Pac4J (v6.1.2) for SAML authentication. The application runs correctly on my local machine, but fails when deployed to a Docker ...
0
votes
1
answer
72
views
CAS Apereo Generic OIDC with dynamic query params
I am using CAS 6.6.15.1 and pac4j generic OIDC to connect to Azure B2C. I can pass in static query params such as
cas.authn.pac4j.oidc[0].generic.custom-params.ui_locales=en
But I also need to be ...
-1
votes
1
answer
45
views
IdP-Initiated Logout flow : How to handle saml logout request and send back a saml logout response to the IdP?
spring boot : 3.5.0
spring security pac4j: 10.0.0
jakartaee-pac4j: 8.0.1
pac4j: 6.1.3
I'm using filter chain to handle Idp-Intiated saml logout request.
Once the app receive saml logout request to the ...
0
votes
1
answer
128
views
PAC4J - Cannot get a user profile in my JEE callback servlet
I am using pac4j 6.1.2 to implement a SAML SSO workflow using plain Servlets on Apache Tomcat 11 and jdk 21. I have code such as the following in my POST callback handler after a successful redirect ...
0
votes
1
answer
33
views
pac4j oidc sample for desktop application
I want to use pac4j (version 6.1.2) in a desktop application to login users with OpenID Connect. I didn't find any example that shows how to use it in a non web-context.
Is that possible and can you ...
Uli's user avatar
- 1,500
0
votes
1
answer
64
views
Pac4j v5.7 Access token renewal
I am working with Pac4j v5.7 and I am fairly new to it. I came to the scenario where using Keycloak as my single sign-on system, my session expires with the access token expiration. I am looking for a ...
0
votes
1
answer
119
views
CAS 6.6.15.1 with delegation via OIDC
I have an instance of Microsoft B2C (entraId) that I am trying to do delegated login to. I am forced to use the generic oidc configuration as the EntraId has a hardcoded discovery URI that I cannot ...
0
votes
0
answers
37
views
Pac4j Oauth2 with Native Application and Token Exchange
So, I currently have a pac4j Service Provider I use as a way to login my customers to my services.
It is currently browser based so as long as one is logged in to my SP and has a valid session, I can ...