Mathias Gebbe

Are you using Azure AD as OIDC provider? We are currently facing the same issue. Can you proof its not happening with Version 7.1.3

I could fix the issue for us by adding `offline_access` to the scope. I compleltly missed that... We are using OIDC with Azure AD. Now it works! We have to...

hey! thanks for the quick response. Here I share the content of our pentest report as promised: In the login processing, the URL specified in the "rd" parameter is used...

--whitelist-domain | string \| list | allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) -- | -- |...

Since I run the `kluctl helm-update --upgrade --commit` command for a large project, it unfortunately happens that charts are updated to beta or release candidate `Updated helm chart capi-aws-bootstrap/cilium from...

thank you!!! i had problems with shared posts that shows many many extra menus. but this was caused by my own changes i think... you don't get extra-menu on shared...

This will be the HTML page that GitLab delivers in the event of a 429 error. More correctly, perhaps JSON should be returned here (depending on what we send in...

Sorry for the advertising, for this challenge I have published this tool. You might want to fork it and rebuild it locally https://github.com/matzegebbe/web-jwks-validator

it still happens with `3.0.0-alpha.1` ```bash docker run -it --rm -e REGISTRY_PROXY_REMOTEURL=https://registry-1.docker.io -p 5000:5000 ghcr.io/distribution/distribution:3.0.0-alpha.1 ``` ```bash curl -I https://registry-1.docker.io/v2/openjdk/manifests/sha256:2775e341f3c17e6e3412c2edaa604f9d851f900757c7f193a1521bab8b4f46cb # HTTP/1.1 401 Unauthorized # body: {"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":[{"Type":"repository","Class":"","Name":"openjdk","Action":"pull"}]}]} ``` ```bash...

Thanks for checking so far. This is also what I see. We have subsequent errors that result in a 500 error, and the original 401 error gets swallowed.