Skip to content

OIDC authentication failed #491

@npcxiao

Description

@npcxiao

I'm trying to use gitea as OIDC provider, but i get the error, Are there any settings I'm missing?

gitea error:

Image

tapir logs:

2025-04-16 13:47:22,501 INFO  [io.quarkus] (main) tapir 0.9.4 on JVM (powered by Quarkus 3.21.2) started in 12.614s. Listening on: http://0.0.0.0:8080
2025-04-16 13:47:22,513 INFO  [io.quarkus] (main) Profile prod activated. 
2025-04-16 13:47:22,514 INFO  [io.quarkus] (main) Installed features: [amazon-sdk-dynamodb, amazon-sdk-s3, amazon-sdk-sts, cdi, config-yaml, elasticsearch-rest-client, hibernate-validator, oidc, quinoa, rest, rest-jackson, security, smallrye-context-propagation, smallrye-openapi, vertx]
2025-04-16 13:47:22,534 INFO  [cor.Bootstrap] (main) Validate GPG key configuration provided
2025-04-16 13:47:22,546 INFO  [cor.Bootstrap] (main) Start to bootstrap registry database [elasticsearch]
2025-04-16 13:47:22,634 WARN  [io.qua.ela.res.low.run.RestClientBuilderHelper] (main) Using Basic authentication in HTTP implies sending plain text passwords over the wire, use the HTTPS protocol instead.
2025-04-16 13:47:23,748 INFO  [cor.bac.ela.ElasticSearchRepository] (main) Created index [modules]
2025-04-16 13:47:24,023 INFO  [cor.bac.ela.ElasticSearchRepository] (main) Created index [providers]
2025-04-16 13:47:24,400 INFO  [cor.bac.ela.ElasticSearchRepository] (main) Created index [reports]
2025-04-16 13:47:24,816 INFO  [cor.bac.ela.ElasticSearchRepository] (main) Created index [deploykeys]
2025-04-16 13:49:40,303 ERROR [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-0) Access token verification has failed: JWT (claims->{"gnt":6,"tt":0,"exp":1744814980,"iat":1744811380}) rejected due to invalid claims or other invalid content. Additional details: [[11] No Issuer (iss) claim present.]

2025-04-16 13:49:44,715 ERROR [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-0) Access token verification has failed: JWT (claims->{"gnt":6,"tt":0,"exp":1744814984,"iat":1744811384}) rejected due to invalid claims 

tapir config:

AUTH_ENDPOINT=https://gitea.server.url
AUTH_PATH=/login/oauth/authorize
AUTH_TOKEN_PATH=/login/oauth/access_token

gitea redirect URI:

http://localhost:8080

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions