External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-10 15:32:05 -03:30
Code Issues Packages Projects Releases Wiki Activity

Getting error 405 'Method Not Allowed' when calling the 'certs' endpoint with HEAD method

Browse Source 
closes #41537

Signed-off-by: mposolda <mposolda@gmail.com>
(cherry picked from commit 2dab73063dd5cc1fdcd5080f8a9f01222ea32d81)
This commit is contained in:
mposolda 2025-07-30 15:36:25 +02:00 committed by Marek Posolda
parent 8c3a96a30b
commit b4cc4b005a
3 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
services/src/main/java/org/keycloak/protocol/oidc/OIDCLoginProtocolService.java
View File

@ -17,6 +17,7 @@
package org.keycloak.protocol.oidc;
import jakarta.ws.rs.HEAD;
import org.jboss.resteasy.reactive.NoCache;
import org.keycloak.http.HttpRequest;
import org.keycloak.OAuthErrorException;
@ -193,6 +194,16 @@ public class OIDCLoginProtocolService {
return Cors.builder().allowedMethods("GET").preflight().auth().add(Response.ok());
}
// The method added just as a workaround to https://github.com/quarkusio/quarkus/issues/49172 . It can be removed once that one is
// fixed in quarkus and Keycloak updated to the corresponding version
@HEAD
@Path("/certs")
@Produces({MediaType.APPLICATION_JSON})
@NoCache
public Response certsHead() {
return certs();
}
@GET
@Path("certs")
@Produces(MediaType.APPLICATION_JSON)

4
testsuite/integration-arquillian/tests/base/src/main/java/org/keycloak/testsuite/broker/util/SimpleHttpDefault.java
View File

@ -49,4 +49,8 @@ public abstract class SimpleHttpDefault extends SimpleHttp {
return SimpleHttp.doGet(url, client, HttpClientProvider.DEFAULT_MAX_CONSUMED_RESPONSE_SIZE);
}
public static SimpleHttp doHead(String url, HttpClient client) {
return SimpleHttp.doHead(url, client, HttpClientProvider.DEFAULT_MAX_CONSUMED_RESPONSE_SIZE);
}
}

5
testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/oidc/AbstractWellKnownProviderTest.java
View File

@ -31,6 +31,7 @@ import org.junit.Test;
import org.junit.runners.MethodSorters;
import org.keycloak.OAuth2Constants;
import org.keycloak.admin.client.resource.RealmResource;
import org.keycloak.broker.provider.util.SimpleHttp;
import org.keycloak.common.Profile;
import org.keycloak.common.constants.ServiceAccountConstants;
import org.keycloak.crypto.Algorithm;
@ -293,6 +294,10 @@ public abstract class AbstractWellKnownProviderTest extends AbstractKeycloakTest
JSONWebKeySet jsonWebKeySet = SimpleHttpDefault.doGet(jwksUri, client).asJson(JSONWebKeySet.class);
assertEquals(3, jsonWebKeySet.getKeys().length);
// Test HEAD method works (Issue 41537)
SimpleHttp.Response responseHead = SimpleHttpDefault.doHead(jwksUri, client).asResponse();
assertEquals(Response.Status.OK.getStatusCode(), responseHead.getStatus());
}
@Test