Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Looping over login page while using oidc authentication #7989

Open
anjuchaurasiya opened this issue Aug 9, 2024 · 0 comments
Open

Looping over login page while using oidc authentication #7989

anjuchaurasiya opened this issue Aug 9, 2024 · 0 comments

Comments

@anjuchaurasiya
Copy link

anjuchaurasiya commented Aug 9, 2024

Summary
After successful login, it is again redirecting to login page.

Background and rationale
args applied to authproxy:

Args:
  --provider=oidc
  --upstream=http://localhost:8080/
  --http-address=0.0.0.0:3000
  --email-domain=*
  --pass-basic-auth=false
  --pass-access-token=true
  --pass-authorization-header=true
  --skip-auth-regex=^\/config\.json$
  --skip-auth-regex=^\/site\.webmanifest$
  --skip-auth-regex=^\/custom_style\.css$
  --skip-auth-regex=^\/clr-ui.min\.css$
  --skip-auth-regex=^\/clr-ui-dark.min\.css$
  --skip-auth-regex=^\/custom_locale\.json$
  --skip-auth-regex=^\/favicon.*\.png$
  --skip-auth-regex=^\/favicon.*\.ico$
  --skip-auth-regex=^\/android-chrome-.*\.png$
  --skip-auth-regex=^\/static\/
  --skip-auth-regex=^\/apis/core/plugins/v1alpha1/configured-plugins$
  --skip-auth-regex=^\/apis/kubeappsapis.core.plugins.v1alpha1.PluginsService/GetConfiguredPlugins$
  --skip-auth-regex=^\/$
  --scope=openid email groups
  --cookie-refresh=15m
  --oidc-issuer-url=https://kc-example.com/realms/test
  --redirect-url=https://kubeapps.example.com/oauth2/callback
  --pass-authorization-header=true
  --set-authorization-header=true
  --request-logging=true
  --standard-logging=true
  --ssl-insecure-skip-verify
  --cookie-secure=false
  --scope=openid email groups
  --upstream-timeout=1200s

auth-proxy error:

[2024/08/09 07:00:39] [stored_session.go:193] Unable to refresh session: error refreshing tokens: unable to redeem refresh token: failed to get token: oauth2: "invalid_grant" "Token is not active"
[2024/08/09 07:00:39] [stored_session.go:94] Error loading cookied session: error refreshing access token for session (Session{email:[email protected] user:43b3391d-90fb-4503-aaa9-21343b040526 PreferredUsername:anjutoken:true id_token:true created:2024-08-08 14:46:38.131302315 +0000 UTC expires:2024-08-08 14:51:38.128212838 +0000 UTC refresh_token:true groups:[kubeapps-test]}): session is expired, removing session

Additional context
kubeapps: 14.7.2
auth-proxy: docker.io/bitnami/oauth2-proxy:7.6.0-debian-12-r4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant