Access Token - module doesn't validate about mod_oauth2

[zandbelt]

see this #51 (reply in thread)

[maarten-ve]

Unfortunately, haven't been able to make progress it seems.

not exacly sure how to debug this further:

[Fri Dec 08 11:00:25.551414 2023] [authz_core:debug] [pid 122904:tid 139718516180736] mod_authz_core.c(820): [client 10.140.239.208:60299] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
[Fri Dec 08 11:00:25.551445 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Authorization: Bearer
[Fri Dec 08 11:00:25.551473 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: User-Agent: PostmanRuntime/7.35.0
[Fri Dec 08 11:00:25.551481 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Accept: /
[Fri Dec 08 11:00:25.551487 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Postman-Token: ac8cf0ed-390b-4e55-b3ae-f3d8b6b5aa88
[Fri Dec 08 11:00:25.551493 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Host: nextmove.glpg.com
[Fri Dec 08 11:00:25.551499 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Accept-Encoding: gzip, deflate, br
[Fri Dec 08 11:00:25.551505 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Connection: keep-alive
[Fri Dec 08 11:00:25.551517 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/server/apache.c(326): [client 10.140.239.208:60299] oauth2_apache_request_context_init: created request context: 0x7f12b4010770
[Fri Dec 08 11:00:25.551525 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/mod_oauth2.c(211): [client 10.140.239.208:60299] oauth2_authz_checker: enter
[Fri Dec 08 11:00:25.551531 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/mod_oauth2.c(243): [client 10.140.239.208:60299] oauth2_authz_checker: leave
[Fri Dec 08 11:00:25.551536 2023] [authz_core:debug] [pid 122904:tid 139718516180736] mod_authz_core.c(820): [client 10.140.239.208:60299] AH01626: authorization result of Require oauth2_claim iss:https://sts.windows.net//: denied (no authenticated user yet)

From the other posts i expecte to see more logging from "mod_oauth2.c" here.

kr

[zandbelt]

 curl https://my.server.com/testar -H "Authorization: Bearer "

does not seem to provide a valid token, or a token at all

[maarten-ve]

aah, the token disappeared from my copy/paste :

[Fri Dec 08 11:00:25.551445 2023] [oauth2:debug] [pid 122904:tid 139718516180736] src/http.c(158): [client 10.140.239.208:60299] _oauth2_http_request_header_set_add_sanitized: Authorization: Bearer ----access token here----