Keycloak SSO-重定向太多

Question

当使用Keycloak-js（版本:4.0.0)在Angular4中创建会话时，SSO不起作用

null

响应URL：

http://localhost:3000/login/generic_oauth#state=wwxu1iywxtsevsxwcfzwhpz7opm63dbu5aombtmdjhe%3d&session_state=6ec8255b-ed4c-4399-951c-0241ce7bebad&code=eyjhbgcioijkaxiilcjlbmioijbmti4q0jdluhtmju2in0…lvjhqloacy0ftmxmoleyq.82msmzkn4hjbnokmezw-xkhurkyMH42RRG0O_AXTZVJYLOZWWA4X9V2DQAIBI2CuGKJLSINFJLLCN8LUK4PSWQOE2BP6WTMSZVIEU30UW8RXVQF46HSTF1DTXWZP-WOCCHWLAQATNQZD61U-AURLZ6ITY8DQXD3HWSCR1KJHFU8BJBR_PCNBT8LIGL_NKAGFCEODFPFOQGUY1ATQQLB.FSMESQYQKVWZBY1RW47A

尝试的选项：

1. Angular4&Jenkins
2. Angular4&Grafana

鉴于以下步骤是有效的

1. 直接登录Grafana或Jenkins或KeyCloak
2. 然后登录Angular 4，它可以工作

  const keycloakAuth: any = Keycloak({
            url: environment.KEYCLOAK_URL,
            realm: environment.KEYCLOAK_REALM,
            clientId: environment.KEYCLOAK_CLIENTID,
            'ssl-required': 'external',
            'public-client': true,
        });

Answer 1

最后，我使用angull-oidc库（隐式流）https://github.com/manfredsteyer/angull-oauth2-oidc实现了SSO功能

 private configureWithNewConfigApi() {
 // URL of the SPA to redirect the user to after login
    this.oauthService.redirectUri = window.location.origin + "/index.html";

    // set the scope for the permissions the client should request
    this.oauthService.scope = "openid profile email";

    // set to true, to receive also an id_token via OpenId Connect (OIDC) in addition to the
    // OAuth2-based access_token
    this.oauthService.oidc = true;

    // Use setStorage to use sessionStorage or another implementation of the TS-type Storage
    // instead of localStorage
    this.oauthService.setStorage(sessionStorage);

    this.oauthService.clientId = "<<clientId>>";
    let url = 'https://<<keycloakhost>>:<<port>>/auth/realms/<<realmsname>>/.well-known/openid-configuration';
    this.oauthService.loadDiscoveryDocument(url).then((doc) => {
        // This method just tries to parse the token within the url when
        // the auth-server redirects the user back to the web-app
        // It dosn't initiate the login
        this.oauthService.tryLogin({});      
        console.debug('discovery succeeded', doc);

    });

感谢Jan Garag的建议