I have successfully configured CAS to act as an OpenId Connect Provider (OP). While investigating a timeout with ownCloud (2.9.x) Desktop client which uses Dynamic Client Registration, it seems, according to the client log, that the "Required" field "client_secret_expires_at" (according to https://openid.net/specs/openid-connect-registration-1_0.html#RegistrationResponse) is not returned in the response.
1) Am I missing a cas property or other configuration to ensure CAS returns the required field "client_secret_expires_at"? 2) Is there a means of having CAS restructure the JSON service registration filename when using the Dynamic Client Registration? ownCloud Desktop client log: 10-23 17:23:47:059 [ info sync.httplogger ]: "f13f926e-d874-4d11-a4b1-7df2d7530ed7: Response: POST 201 https://secure.redacted.com/cas/oidc/register Header: { Date: Sat, 23 Oct 2021 21:23:47 GMT, Server: Apache, Cache-Control: no-cache, no-store, max-age=0, must-revalidate, Pragma: no-cache, Expires: 0, Strict-Transport-Security: max-age=15768000 ; includeSubDomains, X-Content-Type-Options: nosniff, X-Frame-Options: DENY, X-XSS-Protection: 1; mode=block, Vary: User-Agent, Keep-Alive: timeout=100, max=200, Connection: Keep-Alive, Transfer-Encoding: chunked, Content-Type: application/json;charset=UTF-8, } Data: [{\"client_id\":\"UBGnyIYODOAKFuZjECv2Q1rUktZI32u5t1oc\",\"client_secret\":\"OhmrjMXWfrysWskASztdBtauReWCccmcuo7s\",\"client_name\":\"ownCloud 2.9.1 (build 5500)\",\"application_type\":\"web\",\"subject_type\":\"public\",\"grant_types\":[\"none\",\"authorization_code\",\"password\",\"client_credentials\",\"refresh_token\",\"urn:ietf:params:oauth:grant-type:uma-ticket\"],\"response_types\":[\"code\",\"none\",\"token\",\"device_code\",\"id_token token\",\"id_token\"],\"redirect_uris\":[\"http://127.0.0.1\"],\"contacts\":[],\"token_endpoint_auth_method\":\"client_secret_basic\",\"registration_access_token\":\"AT-167-fKXLMd02GdvhPMpO6LYuziCQKu457stZ\",\"registration_client_uri\":\"https://secure.redacted.com/cas/oidc/clientConfig?clientId=UBGnyIYODOAKFuZjECv2Q1rUktZI32u5t1oc\"}]"; 10-23 17:23:47:059 [ warning sync.credentials.oauth ]: Failed to dynamically register the client, try the default client id "\tError: Missing field client_secret_expires_at\n" CAS log: 2021-10-23 17:24:47,169 WARN [org.apereo.cas.services.resource.AbstractResourceBasedServiceRegistry] - <[ownCloud2.9.1(build5500)- 1635024227050.json] does not match the recommended pattern [(\w+-)+(\d+)\.json]. While CAS tries to be forgiving as much as possible, it's recommendedthat you rename the file to match the requested pattern to avoid issues with duplicate service loading. Future CAS versions may try to strictly force the naming syntax, refusing to load the file.> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c7bb9141-9195-474e-b80b-197e49367f92n%40apereo.org.
