Skip to content

[BUG] OIDC required_uris is using plain HTTP #365

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
gnouts opened this issue Mar 11, 2025 · 3 comments
Closed

[BUG] OIDC required_uris is using plain HTTP #365

gnouts opened this issue Mar 11, 2025 · 3 comments
Labels
bug Something isn't working

Comments

@gnouts
Copy link

gnouts commented Mar 11, 2025

Describe the bug
I setup OIDC with Authelia as instructed in the wiki.

Login with the provider fails with error 400 :

"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed. The 'redirect_uri' parameter does not match any of the OAuth 2.0 Client's pre-registered 'redirect_uris'. The 'redirect_uris' registered with OAuth 2.0 Client with id 'xxx' did not match 'redirect_uri' value 'http://yamtrack.domain.com/accounts/oidc/authelia/login/callback/'."

To Reproduce
yamtrack 0.20.2 accessed by https, latest Authelia with oidc configured.

This is my authelia config

      - client_name: "Yamtrack"
        client_id: "xzy"
        client_secret: "$pbkdf2-sha512$xxx"
        consent_mode: implicit
        public: false
        authorization_policy: "one_factor"
        require_pkce: true
        redirect_uris:
          - 'https://yamtrack.domain.com/accounts/oidc/authelia/login/callback/'
#          - 'http://yamtrack.domain.com/accounts/oidc/authelia/login/callback/'
        scopes:
          - "openid"
          - "groups"
          - "email"
          - "profile"

If I add the http:// version, it works. But it shouldn't be necessary

Expected behavior
Required_uris should should match the protocol yamtrack is accessed with.

Yamtrack version: 0.20.2
Database: SQLite

@gnouts gnouts added the bug Something isn't working label Mar 11, 2025
@balgerion
Copy link

balgerion commented Mar 11, 2025

is the same with authentik redirect url is trying to use http instead of https
from web login url:
"redirect_uri=http%3A%2F%2Ftracker.balgeriada.com%2Faccounts%2Foidc%2Fauthentik%2Flogin%2Fcallback%2F"
and its cousing strange errors

Image

on Authentik:

Image

docker compose url:

Image

@FuzzyGrim
Copy link
Owner

Fixed in v0.20.3

@gnouts
Copy link
Author

gnouts commented Mar 11, 2025

I confirm it's working 👍
thanks a lot for this OIDC feature 🙇 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants