为API存储应用程序在IdP中设置默认wso2

Question

我使用的是一个集群环境，其中标识服务器是关键管理器。我一直试图使用隐式和授权授权来测试我们的应用程序和JWT声明。当我创建一个应用程序时，它将自己设置为一个服务提供者，本地和出站身份验证是默认的，而不是我们使用SAML作为Shibboleth的联邦。我遵循这个post，我厌倦了它的多种变体。我试图在IS_HOME /repo/conf/identity/service-provider中配置两个文件。default.xml和sp_dashboard.xml。当我配置sp_dashboard时，似乎什么都没有发生。但是，当我配置default.xml并试图通过隐式授权获取访问令牌时，我会得到这个错误。

此外，如果没有任何配置，一切都可以正常工作，但需要用户使用隐式授权和授权授权再次登录。然后，当您使用隐式登录时，将我授予在URL中带有访问令牌的碳，但授权会让我在没有任何代码可使用的情况下访问碳。

日志错误

TID: [-1234] [] [2017-01-09 14:48:36,323] ERROR {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultRequestCoordinator} -  Exception in Authentication Framework java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
    at java.util.ArrayList.rangeCheck(ArrayList.java:653)
    at java.util.ArrayList.get(ArrayList.java:429)
    at org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler.handle(DefaultStepHandler.java:208) at org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler.handle(DefaultStepBasedSequenceHandler.java:173)
    at org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler.handle(DefaultAuthenticationRequestHandler.java:121)
    at org.wso2.carbon.identity.application.authentication.framework.handler.request.ipl.DefaultRequestCoordinator.handle(DefaultRequestCoordinator.java:137)
    at org.wso2.carbon.identity.application.authentication.framework.CommonAuthenticationHandler.doPost(CommonAuthenticationHandler.java:46)
    at org.wso2.carbon.identity.application.authentication.framework.CommonAuthenticationHandler.doGet(CommonAuthenticationHandler.java:37)
    at org.wso2.carbon.identity.oauth.endpoint.authz.OAuth2AuthzEndpoint.sendRequestToFramework(OAuth2AuthzEndpoint.java:1062)
    at org.wso2.carbon.identity.oauth.endpoint.authz.OAuth2AuthzEndpoint.authorize(OAuth2AuthzEndpoint.java:203)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:188) at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:104)
    at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:204)
    at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:101)
    at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:58)
    at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:94)
    at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:272)
    at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
    at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:249)
    at org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:248)
    at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:222)
    at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:153)
    at org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:171)
    at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:289)
    at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doGet(AbstractHTTPServlet.java:214)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:624)
    at org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:265

页错误

​

​

以下是我目前的心声

SP_DASHBOARD

<ServiceProvider>
    <ApplicationID>2</ApplicationID>
    <ApplicationName>wso2_sp_dashboard</ApplicationName>
    <Description>Default Service Provider</Description>
    <InboundAuthenticationConfig>
            <InboundAuthenticationRequestConfigs>
                    <InboundAuthenticationRequestConfig>
                            <InboundAuthKey>wso2.my.dashboard</InboundAuthKey>
                            <InboundAuthType>samlsso</InboundAuthType>
                            <Properties></Properties>
                    </InboundAuthenticationRequestConfig>
            </InboundAuthenticationRequestConfigs>
    </InboundAuthenticationConfig>
    <LocalAndOutBoundAuthenticationConfig>
            <AuthenticationSteps>
                    <AuthenticationStep>
                            <StepOrder>1</StepOrder>
                            <FederatedIdentityProviders>
                            <IdentityProvider>
                                   <Name>IdPSSO</Name>
                                 <FederatedAuthenticatorConfigs>
                                         <FederatedAuthenticatorConfig>
                                                 <Name>SAMLSSOAuthenticator</Name>
                                         </FederatedAuthenticatorConfig>
                                 </FederatedAuthenticatorConfigs>
                             </IdentityProvider>
                            </FederatedIdentityProviders>
                            <SubjectStep>true</SubjectStep>
                            <AttributeStep>true</AttributeStep>
                    </AuthenticationStep>
            </AuthenticationSteps>
            <UseUserstoreDomainInUsername>true</UseUserstoreDomainInUsername>
            <UseTenantDomainInUsername>false</UseTenantDomainInUsername>
    </LocalAndOutBoundAuthenticationConfig>
   <RequestPathAuthenticatorConfigs></RequestPathAuthenticatorConfigs>
   <InboundProvisioningConfig></InboundProvisioningConfig>
    <OutboundProvisioningConfig></OutboundProvisioningConfig>
    <ClaimConfig>
      <AlwaysSendMappedLocalSubjectId>true</AlwaysSendMappedLocalSubjectId>
   </ClaimConfig>
    <PermissionAndRoleConfig></PermissionAndRoleConfig>

​

默认设置

<ServiceProvider>
    <ApplicationID>1</ApplicationID>
    <ApplicationName>default</ApplicationName>
    <Description>Default Service Provider</Description>
    <InboundAuthenticationConfig>
            <InboundAuthenticationRequestConfigs>
                    <InboundAuthenticationRequestConfig>
                            <InboundAuthKey>default</InboundAuthKey>
                            <InboundAuthType></InboundAuthType>
                            <Properties></Properties>
                    </InboundAuthenticationRequestConfig>
            </InboundAuthenticationRequestConfigs>
    </InboundAuthenticationConfig>
    <LocalAndOutBoundAuthenticationConfig>
            <AuthenticationSteps>
                    <AuthenticationStep>
                            <StepOrder>1</StepOrder>
                            <FederatedIdentityProviders>
                             <IdentityProvider>
                                   <Name>IdPSSO</Name>
                                 <FederatedAuthenticatorConfigs>
                                         <FederatedAuthenticatorConfig>
                                                 <Name>SAMLSSOAuthenticator</Name>
                                         </FederatedAuthenticatorConfig>
                                 </FederatedAuthenticatorConfigs>
                             </IdentityProvider>
                            </FederatedIdentityProviders>
                            <SubjectStep>true</SubjectStep>
                            <AttributeStep>true</AttributeStep>
                    </AuthenticationStep>
            </AuthenticationSteps>
    </LocalAndOutBoundAuthenticationConfig>
    <RequestPathAuthenticatorConfigs></RequestPathAuthenticatorConfigs>
    <InboundProvisioningConfig></InboundProvisioningConfig>
    <OutboundProvisioningConfig></OutboundProvisioningConfig>
    <ClaimConfig>
      <AlwaysSendMappedLocalSubjectId>true</AlwaysSendMappedLocalSubjectId>
   </ClaimConfig>
    <PermissionAndRoleConfig></PermissionAndRoleConfig>

​

Answer 1

找出我必须做的配置。是在IS default.xml里。看起来IsEnabled是我配置中缺少的重要部分。

<FederatedIdentityProviders>
    <IdentityProvider>
      <IdentityProviderName>IdPSSO</IdentityProviderName>
          <IsEnabled>true</IsEnabled>
       <FederatedAuthenticatorConfigs>
         <FederatedAuthenticatorConfig>
            <Name>SAMLSSOAuthenticator</Name>
            <IsEnabled>true</IsEnabled>
          </FederatedAuthenticatorConfig>
       </FederatedAuthenticatorConfigs>
       <DefaultAuthenticatorConfig>SAMLSSOAuthenticator</DefaultAuthenticatorConfig>
     </IdentityProvider>
</FederatedIdentityProviders>