Uploaded image for project: 'Keycloak'
  1. Keycloak
  2. KEYCLOAK-14050

[REL] Token revocation endpoint returns 500 instead of 200

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: 10.0.1
    • Component/s: None
    • Labels:
      None

      Description

      TokenRevocationTest and TokenRevocationCorsTest fails with:

      ERROR [org.keycloak.headers.DefaultSecurityHeadersProvider] (default task-2) MediaType not set on path /auth/realms/test/protocol/openid-connect/revoke, with response status 200

      This is caused by the endpoint returning an empty response with status code 200 and no content type. No content type is not recommended as such the security headers provider prevents this, but in certain cases it should be permitted, but has to be explicitly enabled in the endpoint.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  stianst Stian Thorgersen
                  Reporter:
                  hmlnarik Hynek Mlnařík
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: