{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2125","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2125/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2125/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2125/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2125","id":115251211,"number":2125,"title":"No cookie matching signin id found + Reverse Proxy Apache","user":{"login":"cuongbk81","id":15668964,"avatar_url":"https://avatars.githubusercontent.com/u/15668964?v=3","gravatar_id":"","url":"https://api.github.com/users/cuongbk81","html_url":"https://github.com/cuongbk81","followers_url":"https://api.github.com/users/cuongbk81/followers","following_url":"https://api.github.com/users/cuongbk81/following{/other_user}","gists_url":"https://api.github.com/users/cuongbk81/gists{/gist_id}","starred_url":"https://api.github.com/users/cuongbk81/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cuongbk81/subscriptions","organizations_url":"https://api.github.com/users/cuongbk81/orgs","repos_url":"https://api.github.com/users/cuongbk81/repos","events_url":"https://api.github.com/users/cuongbk81/events{/privacy}","received_events_url":"https://api.github.com/users/cuongbk81/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-11-05T10:14:45Z","updated_at":"2015-11-06T03:10:10Z","closed_at":null,"body":"I deploy Idsv3 into: http://192.168.1.100:8181/idsv3\r\nWe config: http://mycompany.com/idsv3:\r\n{\r\nProxyPass /sso http://192.168.1.100:8181/idsv3\r\nProxyPassReverse /sso http://192.168.1.100:8181/idsv3\r\nProxyPassReverseCookiePath /sso http://192.168.1.100:8181/idsv3\r\n}\r\nAll request to http://mycompany.com/idsv3 will be redirect to http://192.168.1.100:8181/idsv3\r\nClient config:\r\n{\r\nAuthorizeServer: http://mycompany.com/idsv3/core/\r\n}\r\nIdsv3 config:\r\n{\r\n var options = new IdentityServerOptions\r\n                {\r\n                    SiteName = ConfigurationManager.AppSettings[\"SiteName\"],\r\n                    RequireSsl = false,\r\n                    SigningCertificate = Certificate.Get(),\r\n                    Factory = idSvrFactory,\r\n                    PublicOrigin = \"http://mycompany.com/\",\r\n                    AuthenticationOptions = new AuthenticationOptions\r\n                    {\r\n                        //IdentityProviders = ConfigureIdentityProviders,\r\n                        EnablePostSignOutAutoRedirect = true,\r\n                        EnableSignOutPrompt = false,\r\n                    },\r\n                };\r\n}\r\nWhen we login from Client, it redirect to http://mycompany.com/idsv3/core/login?signin=3719c37ea2fe586c3a7ea50158836cb7 then exception: \"There is an error determining which application you are signing into. Return to the application and try again\". But we check log, that has information \"No cookie matching signin id found\". I think Idsv3 not write cookie into http://mycompany.com/ by Reverse Proxy Apache, so Idsv3 does not read all information of cookie to compare.\r\nPlease help to debug that. Thanks!"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/154272042","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2125#issuecomment-154272042","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2125","id":154272042,"user":{"login":"cuongbk81","id":15668964,"avatar_url":"https://avatars.githubusercontent.com/u/15668964?v=3","gravatar_id":"","url":"https://api.github.com/users/cuongbk81","html_url":"https://github.com/cuongbk81","followers_url":"https://api.github.com/users/cuongbk81/followers","following_url":"https://api.github.com/users/cuongbk81/following{/other_user}","gists_url":"https://api.github.com/users/cuongbk81/gists{/gist_id}","starred_url":"https://api.github.com/users/cuongbk81/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cuongbk81/subscriptions","organizations_url":"https://api.github.com/users/cuongbk81/orgs","repos_url":"https://api.github.com/users/cuongbk81/repos","events_url":"https://api.github.com/users/cuongbk81/events{/privacy}","received_events_url":"https://api.github.com/users/cuongbk81/received_events","type":"User","site_admin":false},"created_at":"2015-11-06T03:10:10Z","updated_at":"2015-11-06T03:10:10Z","body":"Thanks BrockAllen for support, I log some information:\r\n  \\\"ClientId\\\": \\\"implicitclientjs\\\",\r\n  \\\"ClientName\\\": \\\"Company login\\\",\r\n  \\\"RedirectUri\\\": \\\"http://10.15.152.163:21575/index.html\\\",\r\n  \\\"AllowedRedirectUris\\\": [\r\n    \\\"http://10.15.152.163:21575/index.html\\\",\r\n    \\\"http://10.15.152.163:21575/silent_renew.html\\\"\r\n  ],\r\n  \\\"SubjectId\\\": \\\"unknown\\\",\r\n  \\\"ResponseType\\\": \\\"id_token\\\",\r\n  \\\"ResponseMode\\\": \\\"fragment\\\",\r\n  \\\"Flow\\\": \\\"Implicit\\\",\r\n  \\\"RequestedScopes\\\": \\\"openid\\\",\r\n  \\\"State\\\": \\\"11391845867457424\\\",\r\n  \\\"Nonce\\\": \\\"9550378390074187\\\",\r\n  \\\"Raw\\\": {\r\n    \\\"state\\\": \\\"11391845867457424\\\",\r\n    \\\"nonce\\\": \\\"9550378390074187\\\",\r\n    \\\"client_id\\\": \\\"implicitclientjs\\\",\r\n    \\\"redirect_uri\\\": \\\"http://10.15.152.163:21575/index.html\\\",\r\n    \\\"response_type\\\": \\\"id_token\\\",\r\n    \\\"scope\\\": \\\"openid\\\"\r\n  }\r\n}\"\r\n[Information] User is not authenticated. Redirecting to login.\r\n[Information] Authorize point host:http://mycompany.com/\r\n[Information] Authorize point path:/idsv3/core/connect/authorize?state=11391845867457424&nonce=9550378390074187&client_id=implicitclientjs&redirect_uri=http%3A%2F%2F10.15.152.163%3A21575%2Findex.html&response_type=id_token&scope=openid\r\n[Information] Authorize point Url:http://mycompany.com/idsv3/core/connect/authorize?state=11391845867457424&nonce=9550378390074187&client_id=implicitclientjs&redirect_uri=http:%2F%2F10.15.152.163:21575%2Findex.html&response_type=id_token&scope=openid\r\n[Information] Authorize point  message.ReturnUrl:http://mycompany.com/idsv3/core/connect/authorize?state=11391845867457424&nonce=9550378390074187&client_id=implicitclientjs&redirect_uri=http%3A%2F%2F10.15.152.163%3A21575%2Findex.html&response_type=id_token&scope=openid\r\n[Information] End authorize request\r\n[Information] Redirecting to login page\r\n[Debug] Protecting message: \"{\\\"ReturnUrl\\\":\\\"http://mycompany.com/idsv3/core/connect/authorize?state=11391845867457424&nonce=9550378390074187&client_id=implicitclientjs&redirect_uri=http%3A%2F%2F10.15.152.163%3A21575%2Findex.html&response_type=id_token&scope=openid\\\",\\\"ClientId\\\":\\\"implicitclientjs\\\",\\\"AcrValues\\\":[],\\\"Created\\\":635823754395330374}\"\r\n[Information] Write Cookie Id:11437a4d2240a3bc046a22cd9352667a\r\n[Information] Write Cookie Name:SignInMessage.11437a4d2240a3bc046a22cd9352667a\r\n[Information] Write Cookie Data:88ToGnpoAWiTtoMMyjreqZh9CcVZtOrjt-6LytaXEWcs_Q2vGtLfPrf8zXpoTegVgghyXmj05_V_fGT5eYSQyDtmvc37XU7Soke92q3f4y6xDMBjmxNFIzhNzGedtyp72sZRo7jpTHWPMX2l9dbL0l8fnbN-nwOOwPM2u5CyQXcfGyW6WWSmrQFnq-88xncjt-u3f6nPkBV5SP6hSjMMgCj_vhw61QuecacBM8ySjcq3_dw3rlA4rzjgn6zkaaBiaMCKCzy-nGokXoXaQq5taYQsGujyWQ7NEquFTB5WL-cStbkrw-LCH97fNM-j8ueSF8GV9RjbBm7WqUHUtTY24tl2feLmqeHZX4uMNEm2xoG6gJJIP1gDAB6PQr2q2wSSUukTQMV66ij3n9QWaiWx6lVe5BmRbyyiERdq0oscMhRq9VdgXyJYNcphGFvcwlmah3kwgCkCj6G13xlWwqNuEZP16veWAbG2m2CM7leKp20\r\n[Information] Write Cookie CookiePath:/idsv3/core\r\n[Error] Write Cookie OK\r\n[Error] Server:http://mycompany.com/idsv3/core/\r\n[Information] Login page requested\r\n[Information] Read Cookie Id:11437a4d2240a3bc046a22cd9352667a\r\n[Information] Read Cookie Name:SignInMessage.11437a4d2240a3bc046a22cd9352667a\r\n[Information] No cookie matching signin id found\r\n\r\nI think cookie is write complete but Reverse Proxy Server not issue to http://mycompany.com/idsv3, then Idsv3 not Read to validate.\r\nPls suggest tool for trace between the proxy and the web server?\r\nThanks for support."}}