Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auhentik and user_oidc: "Wrond number of segments" errors in the log #633

Open
Ra72xx opened this issue May 21, 2023 · 2 comments
Open

Auhentik and user_oidc: "Wrond number of segments" errors in the log #633

Ra72xx opened this issue May 21, 2023 · 2 comments

Comments

@Ra72xx
Copy link

Ra72xx commented May 21, 2023

I switched Nextcloud from LDAP auth to OIDC according to this page: https://blog.cubieserver.de/2022/complete-guide-to-nextcloud-oidc-authentication-with-authentik/. I also shortened my token because this is mentioned in this guide. Though everything seems to work as expected, I get tons of messages like this in my Nextcloud log:
{"reqId":"xxxxx","level":3,"time":"2023-05-21T04:31:00+00:00","remoteAddr":"46.142.186.191","user":"--","app":"user_oidc","method":"GET","url":"/nextcloud/index.php/apps/passwords/api/1.0/session/keepalive","message":"Impossible to decode OIDC token:Wrong number of segments","userAgent":"Offizielle Passwords Firefox Extension auf Linux","version":"26.0.1.1","data":{"app":"user_oidc"},"id":"xxxxxx"}

This also happens for other apps, not only the passwords extension. However, as I said, everything seems to work, but I dislike logfile entries like this ;-) ...

@quenenni
Copy link

Hello,

I have the same situation.
From what I gathered, the log message comes when you're using a app password token instead of a SSO token to access the cloud from an external app.

That msg comes from this file:
apps/user_oidc/lib/Vendor/Firebase/JWT/JWT.php

So, indeed, that shouldn't be a problem, but maybe the dev can check if it's an app passwrod token used and in that case, not show the msg.

@joergmschulz
Copy link

this is not restricted to Authentik but happens in keycloak as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants