Java Community | Help. Code. Learn.•3w ago

Oauth2 client

Is this behavior normal? after login success and token exchange , client removed session and i have to login again

13 Replies

⌛ This post has been reserved for your question.

Hey @llamasad! Please use /close or the Close Post button above when your problem is solved. Please remember to follow the help guidelines. This post will be automatically marked as dormant after 300 minutes of inactivity.

TIP: Narrow down your issue to simple and precise questions to maximize the chance that others will reply in here.

dan1st•3w ago

which endpoint?

llamasadOP•3w ago

what are u meant ?

dan1st•3w ago

Well I assume the log is written in response to a request

dan1st•3w ago

Maybe you can set a breakpoint in https://github.com/spring-projects/spring-security/blob/31fb7feed5fdb8722639254661208d5eebf460cd/oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/oidc/session/InMemoryOidcSessionRegistry.java#L51-L57 and check the call stack?

GitHub

spring-security/oauth2/oauth2-client/src/main/java/org/springframew...

Spring Security. Contribute to spring-projects/spring-security development by creating an account on GitHub.

JavaBot•3w ago

    public OidcSessionInformation removeSessionInformation(String clientSessionId) {
        OidcSessionInformation information = this.sessions.remove(clientSessionId);
        if (information != null) {
            this.logger.trace("Removed client session");
        }
        return information;
    }

    public OidcSessionInformation removeSessionInformation(String clientSessionId) {
        OidcSessionInformation information = this.sessions.remove(clientSessionId);
        if (information != null) {
            this.logger.trace("Removed client session");
        }
        return information;
    }

dan1st•3w ago

then you'd know what called it

llamasadOP•3w ago

authorize code flow is work fine but why it remove client , i observe log but notthing error offline session is create in keyloack like normal with offline access scope maybe this error on client

dan1st•3w ago

yes and I suggested to use a breakpoint to see what attempted to remove the client session

dan1st•3w ago

also you could enable logging of all requests to see whether another request caused it: https://stackoverflow.com/a/43155103/10871900

Stack Overflow

Spring Boot - How to log all requests and responses with exceptions...

I'm working on REST API with spring boot. I need to log all requests with input params (with methods, eg. GET, POST, etc.), request path, query string, corresponding class method of this request, a...

dan1st•3w ago

(you don't need to log the payload and client info) or alternatively, you could just use the devtools and see which request is pending when the breakpoint is hit and the thread is suspended

llamasadOP•3w ago

let me try

JavaBot•3w ago

💤 Post marked as dormant

This post has been inactive for over 300 minutes, thus, it has been archived. If your question was not answered yet, feel free to re-open this post or create a new one. In case your post is not getting any attention, you can try to use /help ping. Warning: abusing this will result in moderative actions taken against you.

Gaming

Programming

Oauth2 client

Did you find this page helpful?