Travis Glenn Hansen
Travis Glenn Hansen
I don't see how you could hit the block of code I have in mind with that config. The only other explanation is that you have different versions of the...
I'm guessing that's the root of the issue. https://github.com/travisghansen/external-auth-server/blob/master/CHANGELOG.md#0130 bullet 4 `use server-side storage of oauth / oidc state data` It's obviously a complex matrix of what tag you've picked,...
I would redeploy with `v0.13.0` and see if the issue persists.
The only place I’ve seen that it’s possible to get that is if you use the logout features (which your tokens did not have enabled). Either that or a version...
It could be if you wiped redis. But state has a ttl on the redis entry of an hour or something….so if you take forever it won’t work in that...
Also note state is very ephemeral. As soon as auth comes back to eas we proactively wipe it out regardless of success or failure with the op.
Yeah for sure we shouldn't crash, I'm pretty sure I have fix queued up for that already but will make sure it's in the next release no matter. Do you...
Welcome! I don’t recommend doing that. I would dedicate a hostname for `eas` and be sure that `eas` isn’t authing itself. Are you setting the redirect uri in the token...
Wow! You have quickly grasped the vision! You can set a fqdn/uri as the redirect uri but you’ll have to be aware of and explicitly manage the cookie domains etc....