AADSTS50011：请求中指定的回复URL与Laravel Socialite中的回复不匹配

Question

我正在使用Laravel-5.8进行用户Azure AD身份验证。我安装了此软件包：

“ socialiteproviders / microsoft-azure”：“ ^ 3.0”，

撰写者需要socialiteproviders / microsoft-azure

我也做了配置。来自数据库的常规登录正在完善，但是Laravel microsoft-azure集成存在问题。

登录控制器

<?php

namespace App\Http\Controllers\Auth;

use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use Illuminate\Http\Request;
use Socialite;

class LoginController extends Controller
{
use AuthenticatesUsers;
protected $redirectTo = '/dashboard';

public function __construct()
{
    $this->middleware('guest')->except('logout');
}

public function redirectToProvider()
{
    return Socialite::with('azure')->redirect();
}

public function handleProviderCallback()
{
    $user = Socialite::with('azure')->user();
}

查看刀片：

login.blade

<form class="login-form" method="POST" action="{{ route('login') }}">
    {{ csrf_field() }}

    <div class=" w3l-form-group{{ $errors->has('email') ? ' has-error' : '' }}">
        <label>Username:</label>
        <div class="group">
            <i class="fas fa-user"></i>
            <input id="email" type="text" class="form-control" name="email" placeholder="Email" required autofocus>
        <div>
        </div>
        </div>
    </div>
    <div>
        @if ($errors->has('email'))
            <span class="help-block" style="color: red">
                <strong>{{ $errors->first('email') }}</strong>
            </span>
        @endif
    </div>

    <div class=" w3l-form-group{{ $errors->has('password') ? ' has-error' : '' }}">
        <label>Password:</label>
        <div class="group">
            <i class="fas fa-unlock"></i>
            <input id="password" type="password" class="form-control" name="password" placeholder="Password"  required>
            @if ($errors->has('password'))
                <span class="help-block">
                    <strong>{{ $errors->first('password') }}</strong>
                </span>
            @endif
        </div>
    </div>
    <button type="submit">Login</button>
    <a href="{{ route('azure.login') }}" class="btn btn-primary"> Azure Login</a>
</form>

我正在使用Laravel-5.8进行用户Azure AD身份验证。我安装了此软件包：

“ socialiteproviders / microsoft-azure”：“ ^ 3.0”，

撰写者需要socialiteproviders / microsoft-azure

我也做了配置。来自数据库的常规登录正在完善，但是Laravel microsoft-azure集成存在问题。

登录控制器

<?php

namespace App\Http\Controllers\Auth;

use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use Illuminate\Http\Request;
use Socialite;

class LoginController extends Controller
{
use AuthenticatesUsers;
protected $redirectTo = '/dashboard';

public function __construct()
{
    $this->middleware('guest')->except('logout');
}

public function redirectToProvider()
{
    return Socialite::with('azure')->redirect();
}

public function handleProviderCallback()
{
    $user = Socialite::with('azure')->user();
}

login.blade

<form class="login-form" method="POST" action="{{ route('login') }}">
    {{ csrf_field() }}

    <div class=" w3l-form-group{{ $errors->has('email') ? ' has-error' : '' }}">
        <label>Username:</label>
        <div class="group">
            <i class="fas fa-user"></i>
            <input id="email" type="text" class="form-control" name="email" placeholder="Email" required autofocus>
        <div>
        </div>
        </div>
    </div>
    <div>
        @if ($errors->has('email'))
            <span class="help-block" style="color: red">
                <strong>{{ $errors->first('email') }}</strong>
            </span>
        @endif
    </div>

    <div class=" w3l-form-group{{ $errors->has('password') ? ' has-error' : '' }}">
        <label>Password:</label>
        <div class="group">
            <i class="fas fa-unlock"></i>
            <input id="password" type="password" class="form-control" name="password" placeholder="Password"  required>
            @if ($errors->has('password'))
                <span class="help-block">
                    <strong>{{ $errors->first('password') }}</strong>
                </span>
            @endif
        </div>
    </div>
    <button type="submit">Login</button>
    <a href="{{ route('azure.login') }}" class="btn btn-primary"> Azure Login</a>
</form>

展开代码段

route / web.php

Route::get('login/azure', 'Auth\LoginController@redirectToProvider')->name('azure.login');
Route::get('login/azure/callback', 'Auth\LoginController@handleProviderCallback');

配置/服务

'azure' => [
    'client_id' => env('AZURE_KEY','1d9af80a-524f-434e-9103-cc8b955ed23c'),
    'client_secret' => env('AZURE_SECRET','lUqW-pxML8Jn7[[email protected]:V6'),
    'redirect' => env('AZURE_REDIRECT_URI','https://laravelproject.laraapps.net/login/azure/callback')
],

正在生产中，所以我不再使用.env

config / app

\ SocialiteProviders \ Manager \ ServiceProvider :: class，

当我单击Azure登录按钮时，在屏幕截图中出现此错误：

这就是我的Azure AD重定向URL中的内容”

https://laravelproject.laraapps.net/login/azure/callback

我该如何解决？

谢谢。

Answer 1

您可以在输入凭据之前在授权端点中找到真正的redirect_uri。

类似于https://login.microsoftonline.com/{tenant}/oauth2/authorize? client_id=6731de76-14a6-49ae-97bc-6eba6914391e &response_type=code &redirect_uri=http%3A%2F%2Flocalhost%3A12345 &response_mode=query &resource=https%3A%2F%2Fservice.contoso.com%2F &state=12345

确保此redirect_uri与Azure门户中的相同。