Asaki2769 comments

Results 5 comments of


                                            Asaki2769

And what about the rest of us??

Yeah, would definitely love a way to run this without a supervised install.

Inconsistent token ExpireAt validation in the OIDCAuthenticator middleware

Having PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD is set to "jwt" is a world of difference, you don't actually get randomly logged out.

Inconsistent token ExpireAt validation in the OIDCAuthenticator middleware

> The problem with `PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD=jwt` is that it breaks the Desktop and Mobile clients on a lot of providers (Like authentik). If we we're able to set the app id...

Using auth-basic, log files are spammed with 'core access token not set'

This log entry also get's spammed if you authenticate through OIDC.

Getting logged out after access token expires while refresh token is still valid.

Not too sure, as there isn't a http401 error in the logs. There isn't anything in the logs really, just a http301 redirect to the IDP logout endpoint exactly after...