Cannot integrate OAuth2 with Keycloak

[vegaskyo]

I am currently running Standalone-server and configuring OAuth2 with Keycloak in conf/application.yaml. But it seems not working.
Do you guys think it's a bug? Since it already supported OAuth2
Here is my config:

security:
authentication:
# Authentication types (supported types: PASSWORD,LDAP,CASDOOR_SSO)
type: CASDOOR_SSO
# IF you set type LDAP, below config will be effective
ldap:
# ldap server config
urls: ldap://ldap.forumsys.com:389/
base-dn: dc=example,dc=com
username: cn=read-only-admin,dc=example,dc=com
password: password
user:
# admin userId when you use LDAP login
admin: read-only-admin
identity-attribute: uid
email-attribute: mail
# action when ldap user is not exist (supported types: CREATE,DENY)
not-exist-action: CREATE
ssl:
enable: false
# jks file absolute path && password
trust-store: "/ldapkeystore.jks"
trust-store-password: ""
casdoor:
user:
admin: admin
oauth2:
enable: true
provider:
github:
authorizationUri: "https://github.com/login/oauth/authorize"
redirectUri: "http://localhost:12345/dolphinscheduler/redirect/login/oauth2"
clientId: ""
clientSecret: ""
tokenUri: "https://github.com/login/oauth/access_token"
userInfoUri: "https://api.github.com/user"
callbackUrl: "http://localhost:5173/login"
iconUri: "https://api.iconify.design/logos/github.svg?width=32&height=32"
provider: github
gitee:
authorizationUri: "https://gitee.com/oauth/authorize"
redirectUri: "http://127.0.0.1:12345/dolphinscheduler/redirect/login/oauth2"
clientId: ""
clientSecret: ""
tokenUri: "https://gitee.com/oauth/token?grant_type=authorization_code"
userInfoUri: "https://gitee.com/api/v5/user"
callbackUrl: "http://127.0.0.1:5173/login"
iconUri: "https://api.iconify.design/simple-icons/gitee.svg?width=32&height=32"
provider: gitee
keycloak:
authorizationUri: "http://localhost:8323/realms/dolphin-realm/protocol/openid-connect/auth"
redirectUri: "http://localhost:12345/dolphinscheduler/redirect/login/oauth2"
clientId: "dolphin-client"
clientSecret: ""
tokenUri: "http://localhost:8323/realms/dolphin-realm/protocol/openid-connect/token"
userInfoUri: "http://localhost:8323/realms/dolphin-realm/protocol/openid-connect/userinfo"
callbackUrl: "http://localhost:12345/dolphinscheduler/ui/home"
iconUri: "https://design.jboss.org/keycloak/logo/images/keycloak_icon_16px.svg"
scope: openid, profile email
authorization-grant-type: authorization_code
provider: keycloak

It redirected to Keycloak login page when I chose Keycloak as Oauth2 login method. When I pressed login, it had session on keycloak, but the page redirected back to Dolphin's login page "http://localhost:3000/dolphinscheduler/ui/login" instead of callbackUri. I am sure that client-secret matches on Keycloak server.

Here is the config dolphin client on Keycloak:

Here is the log:

[ERROR] 2023-11-23 16:59:12.511 +0700 org.apache.dolphinscheduler.api.controller.LoginController:[259] - Request execute failed, httpCode: 415, httpBody: okhttp3.internal.http.RealResponseBody@ba59085
java.lang.RuntimeException: Request execute failed, httpCode: 415, httpBody: okhttp3.internal.http.RealResponseBody@ba59085
at org.apache.dolphinscheduler.common.utils.OkHttpUtils.getResponseBody(OkHttpUtils.java:123)
at org.apache.dolphinscheduler.common.utils.OkHttpUtils.post(OkHttpUtils.java:68)
at org.apache.dolphinscheduler.api.controller.LoginController.loginByAuth2(LoginController.java:236)
at org.apache.dolphinscheduler.api.controller.LoginController$$FastClassBySpringCGLIB$$a36f5ae2.invoke()
at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:793)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:763)
at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:97)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:763)
at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:708)
at org.apache.dolphinscheduler.api.controller.LoginController$$EnhancerBySpringCGLIB$$ee1d5d63.loginByAuth2()
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205)
at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:150)
at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:117)
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895)
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:808)
at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)
at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1070)
at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:963)
at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006)
at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:898)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:497)
at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:584)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1656)
at org.springframework.web.filter.CorsFilter.doFilterInternal(CorsFilter.java:91)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
at org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:96)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:552)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:600)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:505)
at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:772)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
at org.eclipse.jetty.server.Server.handle(Server.java:516)
at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)
at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)
at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:409)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034)
at java.base/java.lang.Thread.run(Thread.java:833)

[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.server.HttpOutput:[612] - close() s=CLOSING,api=BLOCKED,sc=false,e=null c=HeapByteBuffer@5a7b8b4b[p=0,l=0,c=0,r=0]={<<<>>>} b=Blocker@70264f4f{null
}
[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.server.handler.gzip.GzipHttpOutputInterceptor:[149] - org.eclipse.jetty.server.handler.gzip.GzipHttpOutputInterceptor@409c6403 exclude by status 30
2
[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.server.HttpChannel:[986] - sendResponse info=null content=HeapByteBuffer@5a7b8b4b[p=0,l=0,c=0,r=0]={<<<>>>} complete=true committing=true callback=
Blocker@70264f4f{null}
[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.server.HttpChannel:[1044] - COMMIT for /dolphinscheduler/redirect/login/oauth2 on HttpChannelOverHttp@39f61325{s=HttpChannelState@3dc990c3{s=HANDLING rs=BLOCKING os=COMMITTED is=IDLE awp=false se=false i=true al=0},r=21,c=false/false,a=HANDLING,uri=//localhost:12345/dolphinscheduler/redirect/login/oauth2?provider=keycloak&session_state=722beaec-2fb4-4e14-8143-2e898670e75d&code=3acb6b93-7da5-4e25-94e4-a1d4f1e087ba.722beaec-2fb4-4e14-8143-2e898670e75d.afbd8037-2c00-464e-ad14-c8b36f118eba,age=42}
302 null HTTP/1.1
Date: Thu, 23 Nov 2023 09:59:12 GMT
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Location: http://localhost:12345/dolphinscheduler/ui/home?authType=oauth2&error=oauth2 auth error

[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.server.HttpConnection:[751] - generate: NEED_HEADER for sendcallback@6663a043[processing][i=http/1.1{s=302,h=5,cl=-1},cb=org.eclipse.jetty.server.httpchannel$SendCallback@66bbd2e2] (null,[p=0,l=0,c=0,r=0],true)@start
[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.http.HttpGenerator:[603] - generateHeaders HTTP/1.1{s=302,h=5,cl=-1} last=true content=HeapByteBuffer@5a7b8b4b[p=0,l=0,c=0,r=0]={<<<>>>}
[DEBUG] 2023-11-23 16:59:12.512 +0700 org.eclipse.jetty.http.HttpGenerator:[604] - Date: Thu, 23 Nov 2023 09:59:12 GMT
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Location: http://localhost:12345/dolphinscheduler/ui/home?authType=oauth2&error=oauth2 auth error