Session expires very soon

[dpakach]

Just leaving phoenix running with ocis backend after few minutes the session expires with this error

[DeepDiver1975]

• phoenix should contact the openid connect provider to refresh the token
• please double check the network console if you see this refresh happening
• also have a look at the browser console for log messages and errors
  THX

[dpakach]

@DeepDiver1975 It sends the request with these parameters but returns back 302

client_id: phoenix
redirect_uri: http://172.17.0.1:9100/oidc-silent-redirect.html
response_type: code
scope: openid profile email
state: 5ae9b7417d504515996e4ce8efeab86d
code_challenge: 1-S1zYi-9OV_xYgfc4UJmqjagwsqTs0OvnpbUULMvpU
code_challenge_method: S256
prompt: none
id_token_hint: eyJhbGciOiJQUzI1NiIsImtpZCI6IiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJwaG9lbml4IiwiZXhwIjoxNTg1MTM2MzMzLCJpYXQiOjE1ODUxMzI3MzMsImlzcyI6Imh0dHBzOi8vMTcyLjE3LjAuMTo5MTMwIiwic3ViIjoiUzNGWTExeWJqci04YUZKZ3hhMHNMNU5Ob1FMbGwyM2kxTzMwcUVEbDNid2hqMllNYkprRnY1M25mZ0wwM3ZaTm5UMGc2NkRfRmR2Q05pMnI2c2xjVWdAa29ubmVjdCIsImF0X2hhc2giOiJ0cDY1Zkx0eElFOVRsdGR2bkVGNEdnIiwic2lkIjoibFNQT0lURXJ5Vk5PdHlHQ20zU2hpMGpudFhfS2syU2UzXzlEYzFVWWVkOD0ifQ.XHwST_orIG-MZTUdHc7TqEwEzqeoldqImZ93eTX0QS01KP3-SdCCckIdPML-1TSum1QJCNt504nlpTMHHUjUALb1EqwIA5YVarJH3KPtPmYYdhbiQtFK9-zAY-IZtUdulumqIhVtTTwB5AV5IyEPMaS-LPJ2-uvXOGEFP1Ngsf2a91vMK2j7Jppx5LqE5Fmt0iUxtSBANtWqFBQ_RULiiCO6rH9XeaxvXL53jP1bdyBLGOUKQfIZIzw9egThKdzzNyFOFIE0gdX0eorV2A1FhHebvJGbghcU85BWcZSBUFLQtbPxkFaekKoikcaepNzNbXCmXWyPpaXKoedum69iNw
response_mode: query

The browser log says

Refused to display 'http://172.17.0.1:9100/oidc-silent-redirect.html?error=access_denied&error_description=invalid%20redirect_uri%3A%20http%3A%2F%2F172.17.0.1%3A9100%2Foidc-silent-redirect.html&state=5ae9b7417d504515996e4ce8efeab86d' in a frame because it set 'X-Frame-Options' to 'deny'.
core.bundle.js:13 SilentRenewService._tokenExpiring: Error from signinSilent: Frame window timed out

[DeepDiver1975]

error_description=invalid%20redirect_uri%3A%20http%3A%2F%2F172.17.0.1%3A9100%2Foidc-silent-redirect.html&state=5ae9b7417d504515996e4ce8efeab86d

This is a setup issue somewhere in the IdP ....

[DeepDiver1975]

we might want to move this to ocis-konnectd or ocis itself .... @IljaN @butonic

[dragotin]

outdated.