goauthentik / goauthentik/authentik
Parallel auth broken
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 651
Description
**Describe the bug**
When running OIDC auth from multiple Terraform providers in parallel and using same Authentik instance as auth source, it opens multiple browsers tabs (not an issue) and triggers some issues with Terraform parallelism (login in parallel to multiple services at the same time / multiple tabs) and thus generate errors like "Something went wrong! Please try again later.". If I force parallelism to 1 on Terraform, login is done sequentially, and I don't have the issue with Authentik. It's like auth session are mixed between tabs.
**To Reproduce**
Setup a Terraform module with multiple instance of same providers (alias, in my case Vault provider) and using same Authentik instance as auth source.
**Expected behavior**
No conflict between sessions
**Screenshots**
**Logs**
**Version and Deployment (please complete the following information):**
- authentik version: 2023.08.3
- Deployment: Helm
**Additional context**
Add any other context about the problem here.
Contributor guide
Research direction
No source files or tests are identified in the issue. Reproduce the problem with multiple aliased Terraform providers using the same Authentik instance, then inspect the OIDC browser and session-handling entry points; done means parallel logins do not mix sessions or produce authentication errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python, terraform
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100