{"action":"created","issue":{"url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad/issues/23","repository_url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad","labels_url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad/issues/23/labels{/name}","comments_url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad/issues/23/comments","events_url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad/issues/23/events","html_url":"https://github.com/SonarQubeCommunity/sonar-auth-aad/issues/23","id":279147600,"number":23,"title":"The redirect URI is localhost?","user":{"login":"marcdonovan","id":8251478,"avatar_url":"https://avatars0.githubusercontent.com/u/8251478?v=4","gravatar_id":"","url":"https://api.github.com/users/marcdonovan","html_url":"https://github.com/marcdonovan","followers_url":"https://api.github.com/users/marcdonovan/followers","following_url":"https://api.github.com/users/marcdonovan/following{/other_user}","gists_url":"https://api.github.com/users/marcdonovan/gists{/gist_id}","starred_url":"https://api.github.com/users/marcdonovan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcdonovan/subscriptions","organizations_url":"https://api.github.com/users/marcdonovan/orgs","repos_url":"https://api.github.com/users/marcdonovan/repos","events_url":"https://api.github.com/users/marcdonovan/events{/privacy}","received_events_url":"https://api.github.com/users/marcdonovan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-12-04T21:00:27Z","updated_at":"2017-12-06T18:50:33Z","closed_at":null,"author_association":"NONE","body":"This would only work if I am using a browser on the Sonar machine. Where does this localhost:9000 URL come from? \r\n\r\nhttps://login.microsoftonline.com/6416915b-6778-4c36-ba4f-e56ff64a8bb7/oauth2/authorize?client_id=61d6b18c-2bf0-41ad-8713-d518565bf7f8&response_type=code&redirect_uri=**http://localhost:9000**/oauth2/callback/aad&state=s4om23kgqastq9h2s1bsee2llh\r\n\r\nI can't find anywhere to configure this. I have a domain name associated with my SonarQube server and it is fronted by Nginx reverse proxy for SSL. So the redirect URI should be https://domain-name.com/oauth2/callback/aad."},"comment":{"url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad/issues/comments/349737451","html_url":"https://github.com/SonarQubeCommunity/sonar-auth-aad/issues/23#issuecomment-349737451","issue_url":"https://api.github.com/repos/SonarQubeCommunity/sonar-auth-aad/issues/23","id":349737451,"user":{"login":"marcdonovan","id":8251478,"avatar_url":"https://avatars0.githubusercontent.com/u/8251478?v=4","gravatar_id":"","url":"https://api.github.com/users/marcdonovan","html_url":"https://github.com/marcdonovan","followers_url":"https://api.github.com/users/marcdonovan/followers","following_url":"https://api.github.com/users/marcdonovan/following{/other_user}","gists_url":"https://api.github.com/users/marcdonovan/gists{/gist_id}","starred_url":"https://api.github.com/users/marcdonovan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcdonovan/subscriptions","organizations_url":"https://api.github.com/users/marcdonovan/orgs","repos_url":"https://api.github.com/users/marcdonovan/repos","events_url":"https://api.github.com/users/marcdonovan/events{/privacy}","received_events_url":"https://api.github.com/users/marcdonovan/received_events","type":"User","site_admin":false},"created_at":"2017-12-06T18:50:33Z","updated_at":"2017-12-06T18:50:33Z","author_association":"NONE","body":"I downloaded Fiddler so I could see whats going on. I see a 302 from the SonarQube host GET /oauth2/callback/aad?code=AQABAAIAAABHh4kmS_aKT5XrjzxRAtHzW0LUorUFYOZiyo0ErZGyIYuwrgMhFAlWbJ4vkqF1UBj1mqhjHsanNrAe7CPkHQFmZr7xizTfw_uAvlIcaIYkQAX-6Z3eLtT5cbWGjpwhPfOJJ1eWFHQYYP642xyzeQS97EWaHJIE7AserSBDsuexEpfebHat-wrHpq4yyJR5vnz-FkEWQpztKLgBSwjXOM4Sn-EkZhRz5JhKTCPmDjyhb5aYSVfQSfza3LzSqlB4AkpMa9xJAc1aTCxjhdA6VwMQJYxrZps23rIeeePzLJcAAwkidkh2VnIP767PQRe7ijwqEF5o3QBo9ipkereMV1K_a338yPgG5YCxab_cAX8tXTXskHGB5eNtzUNASKCB3HUYtC64gzLUtKz9Rjpm0NABCl2qKhbfBTjTsPvW2umJ48qL7LiRApzqRsafTBW4_xO3nwAiMN4tGjS6Cr0-lbhB7ozqHTdIXTFC9tAIkM9RYdPhPSJ4INsuh2QMAwrwUINVhdxowQc0QeOsZ3X54MK01Fzld1tfFfg96UmiVdBj5_jL4cqKv1HlEdgx51p-RM-9N0_ethX0yqotny0xzvcQh4I5nyfd_nqto8ZMFUywsfMyNbGKAbCQ6AmBZUGP6MP10UxGAvVatiPc54kRztAwu5JNFD1KQUAoBPPHNq7r57gCguBNZ045BpxLGHsGa3QgAA&state=1f05tu9mljmnlg93reien0rek4&session_state=da9a7099-ec36-46df-b290-\r\n\r\nwith these headers\r\n\r\nHTTP/1.1 302\r\nServer: nginx/1.12.2\r\nDate: Wed, 06 Dec 2017 18:41:10 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: OAUTHSTATE=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly\r\nLocation: http://localhost:9000/sessions/unauthorized\r\n\r\nSo sonar is sending me to a localhost page, which is not running on my local box. I know I am authenticated since I can browse portal.office.com and I can see my documents.\r\n"}}
{"actor":{"display_login":"marcdonovan"}}