OpenID redirect not bypass login page

ℹ️ Support
1

Nextcloud version (eg, 10.0.2): 12.0.0.29
Operating system and version (eg, Ubuntu 16.04): Ubuntu 16.04
Apache or nginx version (eg, Apache 2.4.25): Apache/2.4.18
PHP version (eg, 5.6): 7.1
Is this the first time you’ve seen this error?: yes

Can you reliably replicate it? (If so, please outline steps):
login via keycloak and authentication done but I redirect to login page for local credentials

The issue you are facing:
OpenID redirect not bypass login page

The output of your Nextcloud log in Admin > Logging:
nothing in nextcloud log and nothing in apache error log

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):
<?php $CONFIG = array ( 'instanceid' => 'oc5c*******', 'passwordsalt' => '*********************', 'secret' => '*********************', 'trusted_domains' => array ( 0 => 'DOMAINNAME', 1 => 'HOSTNAME', ), 'datadirectory' => '/var/www/nextcloud/data', 'overwrite.cli.url' => 'URL', 'dbtype' => 'mysql', 'version' => '12.0.0.29', 'dbname' => 'DBNAME', 'dbhost' => 'localhost', 'dbport' => '', 'dbtableprefix' => 'oc_', 'dbuser' => 'DBUSER', 'dbpassword' => 'PASSWORD', 'installed' => true, 'loglevel' => 1, 'memcache.local' => '\OC\Memcache\APCu', 'memcache.distributed' => '\OC\Memcache\Memcached', );

The output of your Apache/nginx/system log in /var/log/____:
**Access.log :
10.21.210.136 - - [27/Sep/2017:07:14:18 +0000] "GET / HTTP/1.1" 302 6976 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.1" 200 1059 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - - [27/Sep/2017:07:14:36 +0000] "GET /index.php/apps/files HTTP/1.1" 200 1541 "http://identity.server.com/auth/realms/supercrunch/protocol/openid-connect/auth?response_type=code%20token&scope=openid&client_id=supercrunch_file_share&state=VyAIESl8jP_zf1J8CHlWLW6D_ms&redirect_uri=https%3A%2F%2Fmy.server.com%2Findex.php%2Fapps%2Ffiles&nonce=Ml99Z9drpGCaF9CvdOiMxB4pGNgBVqpWyn3dCBk8eNI" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "POST /index.php/apps/files HTTP/1.1" 302 803 "https://my.server.com/index.php/apps/files" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET / HTTP/1.1" 302 1261 "https://my.server.com/index.php/apps/files" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/login HTTP/1.1" 302 1223 "https://my.server.com/index.php/apps/files" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/login HTTP/1.1" 200 4174 "https://my.server.com/index.php/apps/files" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/vendor/select2/select2.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 3784 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/vendor/jquery-ui/themes/base/jquery-ui.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 6661 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/css/jquery-ui-fixes.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 1627 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /apps/files_versions/css/versions.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 1282 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /apps/files_pdfviewer/css/style.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 771 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/css/jquery.ocdialog.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 1440 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /apps/files_videoplayer/css/style.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 2652 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/css/guest.css?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 5264 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/search/js/search.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 4197 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /apps/encryption/js/encryption.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 1167 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/js/backgroundjobs.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 1261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /apps/files_pdfviewer/js/previewplugin.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 2526 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /apps/files_videoplayer/js/viewer.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 2083 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/js/jquery-ui-fixes.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 881 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/js/files/fileinfo.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 1561 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/js/files/client.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 5850 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/js/contactsmenu.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 4147 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/vendor/jsTimezoneDetect/jstz.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 4587 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/apps/theming/styles?v=49 HTTP/1.1" 200 1702 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/js/core/merged-template-prepend.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 40213 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/vendor/core.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 279463 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/js/core/merged-share-backend.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 23666 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/js/core/merged-login.js?v=dbf1308bb19901bf2617c03d6474ad96-49 HTTP/1.1" 200 2987 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/apps/theming/js/theming?v=49 HTTP/1.1" 200 1221 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /index.php/apps/theming/logo?v=49 HTTP/1.1" 200 19475 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:36 +0000] "GET /core/img/loading-dark.gif HTTP/1.1" 200 5263 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:37 +0000] "GET /core/fonts/OpenSans-Regular.woff HTTP/1.1" 200 21164 "https://my.server.com/core/css/guest.css?v=dbf1308bb19901bf2617c03d6474ad96-49" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:37 +0000] "GET /core/fonts/OpenSans-Light.woff HTTP/1.1" 200 63522 "https://my.server.com/core/css/guest.css?v=dbf1308bb19901bf2617c03d6474ad96-49" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:37 +0000] "GET /core/fonts/OpenSans-Semibold.woff HTTP/1.1" 200 70596 "https://my.server.com/core/css/guest.css?v=dbf1308bb19901bf2617c03d6474ad96-49" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:37 +0000] "GET /core/img/actions/confirm.svg HTTP/1.1" 200 1431 "https://my.server.com/index.php/apps/theming/styles?v=49" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:37 +0000] "GET /cron.php HTTP/1.1" 200 995 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 10.21.210.136 - ncadmin [27/Sep/2017:07:14:37 +0000] "GET /index.php/apps/theming/loginbackground?v=49 HTTP/1.1" 200 291607 "https://my.server.com/index.php/apps/theming/styles?v=49" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"

Error.log
[Wed Sep 27 07:14:36.605641 2017] [auth_openidc:warn] [pid 21227] [client 10.21.210.136:52342] oidc_proto_validate_code_response: requested flow is "code token" but there is an "access_token" parameter in the code response that will be dropped, referer: https://my.server.com/index.php/apps/files
[Wed Sep 27 07:14:36.605661 2017] [auth_openidc:warn] [pid 21227] [client 10.21.210.136:52342] oidc_proto_validate_code_response: requested flow is "code token" but there is a "token_type" parameter in the code response that will be dropped, referer: https://my.server.com/index.php/apps/files

Remember, this information may be requested if it isn’t supplied; for fastest response please provide as much as you can :heart: Feel free to use a pastebin service, otherwise log files can be indented with 4 spaces on each line to present them in a friendlier way on the forum.