0s7lo (0s7lo) asked a question.
Request URI error
Can someone help me fix this error?
I'm new to Okta and trying some simulation on AiTm, and I get this error. Not sure how to fix it.
I dont have any application configured. When I try to access it uses the default dashboard
The redirect_uri Parameter Must Be a Login Redirect URI in the Client App Settings
{
"actor": {
"id": "okta.2b1859c8-bcc0-56eb-a589-cfcfb7422f26",
"type": "PublicClientApp",
"alternateId": "0obbk8g99cOe5OygP697",
"displayName": "Okta Dashboard",
"detailEntry": null
},
"client": {
"userAgent": {
"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"os": "Mac OS 14.3.0 (Sonoma)",
"browser": "CHROME"
},
"zone": "null",
"device": "Computer",
"id": "okta.2b1959c8-bcc0-56eb-a589-cfcfb7422f26",
"ipAddress": "28.199.47.186",
"geographicalContext": {
"city": "Frankfurt am Main",
"state": "Hesse",
"country": "Germany",
"postalCode": "60313",
"geolocation": {
"lat": 50.1188,
"lon": 8.6843
}
}
},
"device": null,
"authenticationContext": {
"authenticationProvider": null,
"credentialProvider": null,
"credentialType": null,
"issuer": null,
"interface": null,
"authenticationStep": 0,
"externalSessionId": "unknown"
},
"displayMessage": "OIDC authorization request",
"eventType": "app.oauth2.authorize",
"outcome": {
"result": "FAILURE",
"reason": "illegal_redirect_uri"
},
"published": "2024-02-26T16:23:51.995Z",
"securityContext": {
"asNumber": 16509,
"asOrg": "a100 row gmbh",
"isp": "amazon.com inc",
"domain": "amazonaws.com",
"isProxy": false
},
"severity": "INFO",
"debugContext": {
"debugData": {
"redirectUri": "https://trial-6868698.example.art/enduser/callback",
"grantedScopes": "",
"responseType": "code",
"requestId": "d2bb67e8f3f57961a09f87c52ff27c30",
"dtHash": "4fb77e98672e750ea7a10a458223dde1ec91d439004607dc10625b941208ff65",
"requestUri": "/oauth2/v1/authorize",
"requestedScopes": "openid, profile, email, okta.users.read.self, okta.users.manage.self, okta.internal.enduser.read, okta.internal.enduser.manage, okta.enduser.dashboard.read, okta.enduser.dashboard.manage",
"state": "c3nf8eqQvBnIh2dPlXEyO5oxdKI4WHibJibFjxlZG0cjqQVQ1JDlvLVpTDf0euxv",
"threatSuspected": "false",
"url": "/oauth2/v1/authorize?client_id=okta.2b1959c8-bcc0-56eb-a589-cfcfb7422f26&code_challenge=gv48sJxjRs9K7uUmkQ5e4cLc5iNLHSn7-cF_KeeIgPo&code_challenge_method=S256&nonce=qlhnaMX4IXzGRosjcRV8bLlHaY0q9Wxch4vKjzlWprtQN3p7GDq5Duii78ZdnJNf&redirect_uri=https%3A%2F%2Ftrial-7388469.example.art%2Fenduser%2Fcallback&response_type=code&scope=openid+profile+email+okta.users.read.self+okta.users.manage.self+okta.internal.enduser.read+okta.internal.enduser.manage+okta.enduser.dashboard.read+okta.enduser.dashboard.manage&state=c3nf8eqQvBnIh2dPlXEyO5oxdKI4WHibJibFjxlZG0cjqQVQ1JDlvLVpTDf0euxv"
}
},
"legacyEventType": "app.oauth2.authorize_failure",
"transaction": {
"type": "WEB",
"id": "d2bb67e8f3f57961a09f87c52ff27c30",
"detail": {}
},
"uuid": "6dbe1964-d4c3-11ee-9c8b-7164bcb84ff5",
"version": "0",
"request": {
"ipChain": [
{
"ip": "28.199.47.186",
"geographicalContext": {
"city": "Frankfurt am Main",
"state": "Hesse",
"country": "Germany",
"postalCode": "60313",
"geolocation": {
"lat": 50.1188,
"lon": 8.6843
}
},
"version": "V4",
"source": null
}
]
},
"target": null
}
@0s7lo (0s7lo) --
From the error it shows your redirect URI as: https://trial-6868698.example.art/enduser/callback
Typically, when you create the client app that is going to be performing the Auth request against (It has the client Id/Secret) it also has a field to specify what redirect URI's are valid for it to send to. The error means this value isn't specified.
Take a look at: https://support.okta.com/help/s/article/The-redirect-uri-parameter-must-be-an-absolute-URI?language=en_US
Yes, I checked the article before
I don't have any client applications on my admin-->application page.
Attached is a screenshot, and you can see there is no active application in my Okta admin console.
Is there any default OpenID application that I cannot see in the admin console?
There isn't enough setup information to provide you an answer. Where are you deriving the Client Id/Client Secret values from that you are passing in your auth request?
>I dont have any application configured. When I try to access it uses the default dashboard
What does this even mean? What are you trying to access? The fact you took a screenshot from the Okta Admin UI means you are accessing the Admin UI fine. The redirect URI you leverage example.ai is the domain meaning the client APP should be located there not on the Okta Service as it needs to be able to prompt for user consent.
If you are trying to force Okta to send a redirect URI to somewhere else then you would want to leverage an OIDC webapp configured for Auth code. Leverage it's client ID/Secret and set a redirect to where ever.
The error message contains the app type PublicApPP
I showed the comparison between the successful login, which has the redirect URI the same as the url.
Do you know why we see the public app for the illegal redirect URL?
Those are 2 different eventTypes they are going to have information specific to the eventType.
in the authorize request the redirectUri": "https://trial-6868698.example.art/enduser/callback"
so what you set in the application of Okta for the redirectUri? it should as same as it. it like a white list of the Uri.