Open ID Provider - Blank consent page

Help / Discuss
1

We would like to use XWiki as identity provider in our intranet infrastructure and for this purpose installed the OpenID Connect Provider extension. After trying for some time we are always stuck at an empty consent page.

2018-02-15 09:48:36,933 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG i.OIDCResourceReferenceHandler - OIDC: Reference: [type = [oidc], parameters = [[response_type] = [[code]], [client_id] = [[3d2ecb9b-0745-45fb-b39c-f7671b3cf00b]], [redirect_uri] = [[http://127.0.0.1:8080/oidc-client/cb]], [scope] = [[openid+email]], [state] = [[nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4]], [nonce] = [[Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q]], [display] = [[popup]]], reference = [Wiki xwiki], action = [], locale = [<null>]]
2018-02-15 09:48:36,934 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG .i.e.AuthorizationOIDCEndpoint - OIDC: Entering [authorization] endpoint
2018-02-15 09:48:36,934 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG .i.e.AuthorizationOIDCEndpoint - OIDC: OpenID client
2018-02-15 09:48:36,934 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG .i.e.AuthorizationOIDCEndpoint - OIDC: Current user: [XWiki.gm]
2018-02-15 09:48:36,935 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG .i.e.AuthorizationOIDCEndpoint - OIDC: Client id: [XWiki.gm]
2018-02-15 09:48:36,935 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG o.x.c.o.p.i.s.OIDCStore        - Get consent USER: reference=xwiki:XWiki.gm
2018-02-15 09:48:36,935 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG o.x.c.o.p.i.s.OIDCStore        - Get consent OIDC: clientIDString=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b redirectURIString=http://127.0.0.1:8080/oidc-client/cb
2018-02-15 09:48:36,935 [http://10.0.40.187:8081/oidc/authorization?response_type=code&client_id=3d2ecb9b-0745-45fb-b39c-f7671b3cf00b&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2Foidc-client%2Fcb&scope=openid+email&state=nSgZnFUdwQbkcdvB7O1gY6pD_q3VrZIfdQUZ3xrKEE4&nonce=Zl7xbtydDahqbETkwJf33dDSFkGxcfTHHZntbQXS17Q&display=popup] 
DEBUG .i.e.AuthorizationOIDCEndpoint - OIDC: Existing consent: [null]

As far as we understand the provider should ask for consent at this point however we only receive a blank page. Maybe someone can point us at the right direction. Thanks for your help.

XWiki 9.11.2
OpenID Connect Provider 1.7

2

Sorry for the delay and thanks for the report. Currently looking if I can reproduce.

3

Looks like I was not very careful for what seemed like a minor modification in 1.7 and I caused a regression. Fixing that and releasing a 1.7.1 quickly today.

4

Done.

5

Nice. Thanks for the support.