IPT syncronization denied with new OIDC functionality

[vjrj]

Using 3.1.0 we cannot sync to a IPT data provider, that is, using the web admin interface.

We can see in the logs:

[2022-09-28 08:48:31] [info] 2022-09-28 08:48:31.534 INFO --- [.0-8080-exec-27] a.o.a.ws.security.service.ApiKeyService : Rejected - no key present
[2022-09-28 08:48:31] [info] 2022-09-28 08:48:31.535 WARN --- [.0-8080-exec-27] a.o.a.c.CollectoryWebServicesInterceptor : Denying access to contacts from remote addr: 127.0.0.1, remote host: 127.0.0.1

and the api_key is configured in the collectory properties.

This was working previously to integrate the OIDC functionality.

cc @sughics .

[vjrj]

Using /openapi/ and Authorization header redirects to the CAS auth login:

but works adding apiKey as param instead of the header.

[adam-collins]

Closing, I assume it is fixed now.

[vjrj]

I reopen this as the fix is in a branch not committed in develop.

[adam-collins]

I have merged with develop, tested as well as I understand the issue, and have prepared a pull request for review.