actualbudget / actualbudget/actual

[Bug]: OIDC With Entra Not Authenticating Additional Users

Offen
#6,071 8 Kommentare 1 Reaktion 0 zugewiesene Personen Auf GitHub ansehen
openid
Vorherrschende Sprache
TypeScript
Sterne
28.7k
Forks
3k
Ø Merge
2 T. 11 Std.
Gemergte PRs (30 T.)
65

Beschreibung

### Verified issue does not already exist?

- [x] I have searched and found no existing issue

### What happened?

I have configured OIDC with an app registration in Entra and it is working fine to authenticate the account set as server owner. Whenever I authentication a second user (already added under User Directory) it throws "openid-grant-failed". The journal is linked below for review, most relevant line reads **OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token**. The sign-in logs Entra-side show successful authentication. I also noticed that when I authenticated my account with OIDC, it set my username in User Directory as some sort of guid:

Image

Log: https://pastebin.com/YeWFFVUJ

### How can we reproduce the issue?

Actual is being hosted on a home server running Debian 12. Entra is set up as IdP using an App Registration.

### Where are you hosting Actual?

Locally via Yarn

### What browsers are you seeing the problem on?

Chrome

### Operating System

Windows 11

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.