-
-
Notifications
You must be signed in to change notification settings - Fork 19
Open
Description
I'm trying to use gitea as OIDC provider, but i get the error, Are there any settings I'm missing?
gitea error:
tapir logs:
2025-04-16 13:47:22,501 INFO [io.quarkus] (main) tapir 0.9.4 on JVM (powered by Quarkus 3.21.2) started in 12.614s. Listening on: http://0.0.0.0:8080
2025-04-16 13:47:22,513 INFO [io.quarkus] (main) Profile prod activated.
2025-04-16 13:47:22,514 INFO [io.quarkus] (main) Installed features: [amazon-sdk-dynamodb, amazon-sdk-s3, amazon-sdk-sts, cdi, config-yaml, elasticsearch-rest-client, hibernate-validator, oidc, quinoa, rest, rest-jackson, security, smallrye-context-propagation, smallrye-openapi, vertx]
2025-04-16 13:47:22,534 INFO [cor.Bootstrap] (main) Validate GPG key configuration provided
2025-04-16 13:47:22,546 INFO [cor.Bootstrap] (main) Start to bootstrap registry database [elasticsearch]
2025-04-16 13:47:22,634 WARN [io.qua.ela.res.low.run.RestClientBuilderHelper] (main) Using Basic authentication in HTTP implies sending plain text passwords over the wire, use the HTTPS protocol instead.
2025-04-16 13:47:23,748 INFO [cor.bac.ela.ElasticSearchRepository] (main) Created index [modules]
2025-04-16 13:47:24,023 INFO [cor.bac.ela.ElasticSearchRepository] (main) Created index [providers]
2025-04-16 13:47:24,400 INFO [cor.bac.ela.ElasticSearchRepository] (main) Created index [reports]
2025-04-16 13:47:24,816 INFO [cor.bac.ela.ElasticSearchRepository] (main) Created index [deploykeys]
2025-04-16 13:49:40,303 ERROR [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-0) Access token verification has failed: JWT (claims->{"gnt":6,"tt":0,"exp":1744814980,"iat":1744811380}) rejected due to invalid claims or other invalid content. Additional details: [[11] No Issuer (iss) claim present.]
2025-04-16 13:49:44,715 ERROR [io.qua.oid.run.CodeAuthenticationMechanism] (vert.x-eventloop-thread-0) Access token verification has failed: JWT (claims->{"gnt":6,"tt":0,"exp":1744814984,"iat":1744811384}) rejected due to invalid claims
tapir config:
AUTH_ENDPOINT=https://gitea.server.url
AUTH_PATH=/login/oauth/authorize
AUTH_TOKEN_PATH=/login/oauth/access_token
gitea redirect URI:
http://localhost:8080
Metadata
Metadata
Assignees
Labels
No labels