openid-connect-generic icon indicating copy to clipboard operation
openid-connect-generic copied to clipboard

Published 20 hours ago • verified publisher icon oidc-wp

Error: Invalid state. [GCP]

Open marepa opened this issue 6 months ago • 9 comments

We do have this quote often and today - right as I was typing this report - it finally occurred to me. We use Google Cloud Platform + custom SSO server. And we think that the problem lies that there are 2 (or more) instances, so that user logged-in in the first one and trying to logged-in inside the second one gets this issue.

This problem seem to occur only when second instance of GCP is activated. Not in local ENV (Laravel Valet) and not in DEV (only 1 instance forced at a time).

What happend to me step by step

  1. I logged in Friday evening to make changes
  2. did not touch the website till today
  3. opened website, go to login (wp-login.php)
  4. click "Login with OpenID connect"
  5. goes immediately back (because SSO server confirmed my logged in automatically)
  6. see the "Invalid state"

Screenshot 2024-07-29 at 11 58 32

Expected behavior Logged in as usual

WordPress Environment

  • Environment: nginx/1.18.0
  • PHP Version: 8.2.21
  • WordPress Version: 6.5.4
  • Plugin Version: 3.10.0
  • Identity Provider: custom SSO server

marepa avatar Jul 29 '24 10:07 marepa