[Support Request]: KeyCloak Auth Support #2657

Closed
opened 2026-02-05 04:43:33 +03:00 by OVERLORD · 8 comments
Owner

Originally created by @zhangxiaokang on GitHub (Feb 18, 2022).

Attempted Debugging

  • I have read the debugging page

Searched GitHub Issues

  • I have searched GitHub for the issue.

Describe the Scenario

bookstack login with keycloak

Exact BookStack Version

v21.12.5

Log Content

No response

PHP Version

No response

Hosting Environment

docker

Originally created by @zhangxiaokang on GitHub (Feb 18, 2022). ### Attempted Debugging - [X] I have read the debugging page ### Searched GitHub Issues - [X] I have searched GitHub for the issue. ### Describe the Scenario bookstack login with keycloak ### Exact BookStack Version v21.12.5 ### Log Content _No response_ ### PHP Version _No response_ ### Hosting Environment docker
OVERLORD added the 🐕 Support label 2026-02-05 04:43:33 +03:00
Author
Owner

@ssddanbrown commented on GitHub (Feb 20, 2022):

Hi @zhangxiaokang,

Unfortunately there's much information here for us to understand the issue.

  • What have you attempted so far?
  • Are you getting specific errors?

If it helps, some users have shared details of their Keycloak setup in this following thread: #1157

@ssddanbrown commented on GitHub (Feb 20, 2022): Hi @zhangxiaokang, Unfortunately there's much information here for us to understand the issue. - What have you attempted so far? - Are you getting specific errors? If it helps, some users have shared details of their Keycloak setup in this following thread: #1157
Author
Owner

@zhangxiaokang commented on GitHub (Feb 22, 2022):

OIDC_ISSUER must start with 'https://'? why not 'http://'?

@zhangxiaokang commented on GitHub (Feb 22, 2022): OIDC_ISSUER must start with 'https://'? why not 'http://'?
Author
Owner

@ssddanbrown commented on GitHub (Feb 22, 2022):

@zhangxiaokang Because that's part of the spec to ensure security of the authentication method. From the OIDC spec:

An Issuer Identifier is a case sensitive URL using the https scheme that contains scheme, host, and optionally, port number and path components and no query or fragment components.

Taken from here, section 1.2: https://openid.net/specs/openid-connect-core-1_0.html

@ssddanbrown commented on GitHub (Feb 22, 2022): @zhangxiaokang Because that's part of the spec to ensure security of the authentication method. From the OIDC spec: > An Issuer Identifier is a case sensitive URL using the https scheme that contains scheme, host, and optionally, port number and path components and no query or fragment components. Taken from here, section 1.2: https://openid.net/specs/openid-connect-core-1_0.html
Author
Owner

@ssddanbrown commented on GitHub (Feb 28, 2022):

Since there's been no further follow-up I'll close this off.

@ssddanbrown commented on GitHub (Feb 28, 2022): Since there's been no further follow-up I'll close this off.
Author
Owner

@gugigunawan commented on GitHub (Jan 12, 2024):

Hello,

i working to integrate Keycloak and Bookstack right now at My Office but have issue to login from Keycloak to BookStack and APP_DEBUG set to TRUE not help so much.

Any suggestions ? because the error only "ID token validate failed with error: Token issue at time is not recent or is invalid"

Bookstack Version : v23.10.2

Keycloak Version : v23.0.4

@gugigunawan commented on GitHub (Jan 12, 2024): Hello, i working to integrate Keycloak and Bookstack right now at My Office but have issue to login from Keycloak to BookStack and APP_DEBUG set to TRUE not help so much. Any suggestions ? because the error only "**ID token validate failed with error: Token issue at time is not recent or is invalid**" Bookstack Version : v23.10.2 Keycloak Version : v23.0.4
Author
Owner

@ssddanbrown commented on GitHub (Jan 15, 2024):

@gugigunawan Please ensure both systems/hosts/containers have the correct time set.
If you need further help, please open a new support issue.

@ssddanbrown commented on GitHub (Jan 15, 2024): @gugigunawan Please ensure both systems/hosts/containers have the correct time set. If you need further help, please open a new support issue.
Author
Owner

@gugigunawan commented on GitHub (Jan 17, 2024):

Hello,

i already have correct set time zone between Docker Image & Hosts System by adding this at docker-compose.yaml
image

but when i change .env file for AUTH_METHOD from standard and oidc still have the same error
any suggestion ?

Thank's and Best Regards.

@gugigunawan commented on GitHub (Jan 17, 2024): Hello, i already have correct set time zone between Docker Image & Hosts System by adding this at docker-compose.yaml <img width="272" alt="image" src="https://github.com/BookStackApp/BookStack/assets/9584750/a5766900-a0c2-495f-995d-096b2760f1e8"> but when i change .env file for AUTH_METHOD from standard and oidc still have the same error any suggestion ? Thank's and Best Regards.
Author
Owner

@ssddanbrown commented on GitHub (Jan 17, 2024):

@gugigunawan That reflects the timezone config, not that the actual time is correct. Check that the time is correct in the BookStack container (for example, by going inside the container and using the date command) and for the keycloak system/container.

If you need further help, please open a new support issue rather than commenting in this closed thread.

@ssddanbrown commented on GitHub (Jan 17, 2024): @gugigunawan That reflects the timezone config, not that the actual time is correct. Check that the time is correct in the BookStack container (for example, by going inside the container and using the `date` command) and for the keycloak system/container. **_If you need further help, please open a new support issue rather than commenting in this closed thread._**
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#2657