Error Sorry, something went wrong.

[hakankazaz]

Hi,

I get the same error when using SAML with keycloak :

Error
Sorry, something went wrong.

Is anybody already solve this?

@simonbrowndotje

Thanks a lot Simon! appreciate this!

Unfortunately, now it gives me another error when redirects to /saml2/authenticate/default:

Logs:

[DEBUG] 2023-12-22 13:40:05.156 [http-nio-8080-exec-5] DispatcherServlet - GET "/dashboard", parameters={}

[DEBUG] 2023-12-22 13:40:05.156 [http-nio-8080-exec-5] RequestMappingHandlerMapping - Mapped to com.structurizr.onpremises.web.home.HomePageController#showAuthenticatedDashboard(String, int, int, ModelMap)

[DEBUG] 2023-12-22 13:40:05.157 [http-nio-8080-exec-5] AnonymousAuthenticationFilter - Set SecurityContextHolder to anonymous SecurityContext

[DEBUG] 2023-12-22 13:40:05.157 [http-nio-8080-exec-5] MethodSecurityInterceptor - Failed to authorize ReflectiveMethodInvocation: public java.lang.String com.structurizr.onpremises.web.home.HomePageController.showAuthenticatedDashboard(java.lang.String,int,int,org.springframework.ui.ModelMap); target is of class [com.structurizr.onpremises.web.home.HomePageController] with attributes [[authorize: 'isAuthenticated()', filter: 'null', filterTarget: 'null']]

[DEBUG] 2023-12-22 13:40:05.157 [http-nio-8080-exec-5] DispatcherServlet - Failed to complete request: org.springframework.security.access.AccessDeniedException: Access is denied

[DEBUG] 2023-12-22 13:40:05.158 [http-nio-8080-exec-5] HttpSessionRequestCache - Saved request https://structurizr.mydomain.com/dashboard?continue to session

[DEBUG] 2023-12-22 13:40:05.158 [http-nio-8080-exec-5] DelegatingAuthenticationEntryPoint - Trying to match using And [Not [RequestHeaderRequestMatcher [expectedHeaderName=X-Requested-With, expectedHeaderValue=XMLHttpRequest]], Not [And [Or [Ant [pattern='/login'], Ant [pattern='/favicon.ico']], And [Not [RequestHeaderRequestMatcher [expectedHeaderName=X-Requested-With, expectedHeaderValue=XMLHttpRequest]], MediaTypeRequestMatcher [contentNegotiationStrategy=org.springframework.web.accept.HeaderContentNegotiationStrategy@29ce1124, matchingMediaTypes=[application/xhtml+xml, image/*, text/html, text/plain], useEquals=false, ignoredMediaTypes=[*/*]]]]]]

[DEBUG] 2023-12-22 13:40:05.158 [http-nio-8080-exec-5] DelegatingAuthenticationEntryPoint - Match found! Executing org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint@49e4037a

[DEBUG] 2023-12-22 13:40:05.158 [http-nio-8080-exec-5] DefaultRedirectStrategy - Redirecting to https://structurizr.mydomain.com/saml2/authenticate/default

[DEBUG] 2023-12-22 13:40:05.189 [http-nio-8080-exec-7] FilterChainProxy - Securing GET /saml2/authenticate/default

[DEBUG] 2023-12-22 13:40:05.191 [http-nio-8080-exec-7] DispatcherServlet - "ERROR" dispatch for GET "/500", parameters={}

[DEBUG] 2023-12-22 13:40:05.191 [http-nio-8080-exec-7] RequestMappingHandlerMapping - Mapped to com.structurizr.onpremises.web.error.Http500Controller#showErrorPage(ModelMap)

[DEBUG] 2023-12-22 13:40:05.192 [http-nio-8080-exec-7] JstlView - View name '500', model {structurizrConfiguration=com.structurizr.onpremises.util.Configuration@6054d5ed, scriptNonce=NjA0NzJmNjEtYTUzNy00MTk1LTg3ZDQtOWU5OTQyYjhjMzFm, timeZone=Etc/UTC, showHeader=true, showFooter=true, version=com.structurizr.onpremises.util.Version@1bdbda8d, authenticated=false, user=null, searchEnabled=true, pageTitle=Structurizr - 500, org.springframework.validation.BindingResult.structurizrConfiguration=org.springframework.validation.BeanPropertyBindingResult: 0 errors, org.springframework.validation.BindingResult.version=org.springframework.validation.BeanPropertyBindingResult: 0 errors}

[DEBUG] 2023-12-22 13:40:05.193 [http-nio-8080-exec-7] JstlView - Forwarding to [/WEB-INF/views/500.jsp]

[DEBUG] 2023-12-22 13:40:05.197 [http-nio-8080-exec-7] DispatcherServlet - Exiting from "ERROR" dispatch, status 500

structurizr.properties:

structurizr.feature.ui.dslEditor=true

structurizr.url=https://structurizr.mydomain.com

structurizr.admin=structurizr

structurizr.data=aws-s3

structurizr.authentication=saml

structurizr.saml.metadata=https://keycloak.mydomain.com/auth/realms/services/protocol/saml/descriptor

structurizr.saml.entityId=structurizr

structurizr.saml.signing.certificate=mydomain.com.cer

structirizr.saml.signing.privateKey=mydomain.com.key

aws-s3.accessKeyId=***********

aws-s3.secretAccessKey=*****************

aws-s3.bucketName=structurizr

aws-s3.endpoint=https://blobstorage.mydomain.com:9000

aws-s3.pathStyleAccess=true

Everything is configured according to the instruction. Although, maybe I've missed something...

Originally posted by @borismus-hawk in #86