Skip to content

Conversation

@rpiotrow
Copy link

This can help to identify any integration problems when using authentication strategy (e.g. Generic OpenID Connect / OAuth2).

Currently there is no info if there is some problem. UI just says "Invalid user or password" and there is nothing in logs.

Adding this simple log helped me to identify that I have improper issuer URL and that there is some problem with certificate chain, example messages:

Error trying to authenticate with strategy <key>: {"err":{"name":"InternalOAuthError","message":"Failed to obtain access token","oauthError":{"code":"UNABLE_TO_VERIFY_LEAF_SIGNATURE"}}}
Authentication failed with strategy <key>: {"err":null,"info":{"message":"ID token not issued by expected OpenID provider."}}
This can help to identify any integration problems when using
providers (e.g. OpenID Connect).
@auto-assign auto-assign bot requested a review from NGPixel August 13, 2025 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants