oCIS + Keycloak + desktop app: crash and wrong URL when re-authenticating
- Dominant language
- Go
- Stars
- 2.1k
- Forks
- 274
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 103
Description
Hello,
I have followed the guide to install owncloud's ocis with keycloak, and everything works as expected using the web browser.
When using the Desktop app, I can authenticate correctly once, but after a few minutes (around 10 minutes) the app kicks me out and I need to re-authenticate. At this point, the URL for the authentication is wrong, and not pointing to the correct keycloak URL.
## Steps to reproduce
- open the Owncloud desktop app (Windows 11)
- add the account for `owncloud.mydomain.net` and press next
- Authenticate using the provided URL (correct):
> https://keycloak.mydomain.net/realms/oCIS/protocol/openid-connect/auth?[.... tokens ...]
- wait a few minutes to be logged out
- Re-authenticate using the provided URL (wrong):
> https://owncloud.mydomain.net/index.php/apps/oauth2/authorize?[.... tokens ...]
The only way to get the correct URL again is to forget the account and re-create it.
### Additional issues
- The ocis docker container log (attached) shows a go stacktrace just when I request the auth URL.
- The oCIS desktop app HTTP log (attached) shows that it's using the wrong "well-known" URL:
`https://owncloud.mydomain.net/.well-known/openid-configuration` instead of `https://keycloak.mydomain.net/.well-known/openid-configuration`.
## Setup
I used the docker-compose examples from the Documentation, and imported the oCIS realm in my Keycloak instance.
My environment variables in the ocis docker are:
```console
IDM_ADMIN_PASSWORD | admin
-- | --
IDM_CREATE_DEMO_USERS | false
OCIS_INSECURE | true
OCIS_LOG_COLOR | false
OCIS_LOG_LEVEL | info
OCIS_OIDC_ISSUER | https://keycloak.mydomain.net/realms/oCIS
OCIS_URL | https://owncloud.mydomain.net
PATH | /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PGID | 1000
PROXY_AUTOPROVISION_ACCOUNTS | true
PROXY_ENABLE_BASIC_AUTH | false
PROXY_OIDC_ISSUER | https://keycloak.mydomain.net/realms/oCIS
PROXY_OIDC_REWRITE_WELLKNOWN | true
PROXY_ROLE_ASSIGNMENT_DRIVER | oidc
PROXY_TLS | false
PROXY_USER_CS3_CLAIM | username
PROXY_USER_OIDC_CLAIM | preferred_username
PUID | 1000
WEB_OIDC_AUTHORITY | https://keycloak.mydomain.net/realms/oCIS
WEB_OIDC_CLIENT_ID | web
WEB_OIDC_METADATA_URL | https://keycloak.mydomain.net/realms/oCIS/.well-known/openid-configuration
```
Go Stacktrace when authenticating from the Desktop app:
```console
2024/03/26 14:59:59 http: panic serving 192.168.90.254:35814: runtime error: invalid memory address or nil pointer dereference
goroutine 19100 [running]:
net/http.(*conn).serve.func1()
net/http/server.go:1898 +0xbe
panic({0x439f7c0?, 0x6473280?})
runtime/panic.go:770 +0x132
net/http.(*Client).deadline(0x61c385?)
net/http/client.go:193 +0xe
net/http.(*Client).do(0x0, 0xc0087eb7a0)
net/http/client.go:608 +0x1f6
net/http.(*Client).Do(...)
net/http/client.go:590
net/http.(*Client).Get(0x0, {0xc0084145a0?, 0x422ba40?})
net/http/client.go:487 +0x5f
github.com/owncloud/ocis/v2/services/proxy/pkg/staticroutes.(*StaticRouteHandler).oIDCWellKnownRewrite(0xc00141f188, {0x7f6c1bc96560, 0xc002ff8540}, 0x1?)
github.com/owncloud/ocis/v2/services/proxy/pkg/staticroutes/oidc_well-known.go:14 +0x73
net/http.HandlerFunc.ServeHTTP(0xc000fdca50?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0xc008488270?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).routeHTTP(0xc00155c780, {0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb560)
github.com/go-chi/chi/v5@v5.0.12/mux.go:459 +0x2e6
net/http.HandlerFunc.ServeHTTP(0xc00b3fe960?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0xc000bddc40?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).ServeHTTP(0xc00155c780, {0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb560)
github.com/go-chi/chi/v5@v5.0.12/mux.go:73 +0x32f
github.com/go-chi/chi/v5.(*Mux).Mount.func1({0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb560)
github.com/go-chi/chi/v5@v5.0.12/mux.go:327 +0x1bb
net/http.HandlerFunc.ServeHTTP(0xc000fdca50?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0xc00792bf84?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).routeHTTP(0xc00155c720, {0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb560)
github.com/go-chi/chi/v5@v5.0.12/mux.go:459 +0x2e6
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0x64775b0?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).ServeHTTP(0xc00155c720, {0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb440)
github.com/go-chi/chi/v5@v5.0.12/mux.go:90 +0x2ee
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.createHome.ServeHTTP({{0x4930460, 0xc00155c720}, {{{0x493da90, 0xc001537440}, 0x1, {0x0, 0x0}, {0xc001addc00, 0x12, 0x1f4}, ...}}, ...}, ...)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/create_home.go:44 +0x642
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.Policies.func1.1({0x7f6c1bc96560?, 0xc002ff8540?}, 0xea24d5f9b3cb6da0?)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/policies.go:52 +0x277
net/http.HandlerFunc.ServeHTTP(0x0?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0x0?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.selectorCookie.ServeHTTP({{0x492d278, 0xc0015680a0}, {{{0x493da90, 0xc001537440}, 0x1, {0x0, 0x0}, {0xc001addc00, 0x12, 0x1f4}, ...}}, ...}, ...)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/selector_cookie.go:36 +0x266
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.accountResolver.ServeHTTP({{0x4930fc0, 0xc000fe3400}, {{{0x493da90, 0xc001537440}, 0x1, {0x0, 0x0}, {0xc001addc00, 0x12, 0x1f4}, ...}}, ...}, ...)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/account_resolver.go:89 +0xb68
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.Authentication.func1.1({0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb320)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/authentication.go:71 +0x3b7
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0x677cac0?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/router.Middleware.func1.1({0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb200)
github.com/owncloud/ocis/v2/services/proxy/pkg/router/router.go:32 +0x23f
net/http.HandlerFunc.ServeHTTP(0xc00b3fe690?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0xc000bdef01?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.HTTPSRedirect.func1({0x7f6c1bc96560, 0xc002ff8540}, 0xc0087eb200)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/https_redirect.go:17 +0x136
net/http.HandlerFunc.ServeHTTP(0x6483150?, {0x7f6c1bc96560?, 0xc002ff8540?}, 0xc008488000?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/command.loadMiddlewares.AccessLog.func37.1({0x7f6c1bc96560, 0xc002ff84c0}, 0xc0087eb200)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/accesslog.go:21 +0x130
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x7f6c1bc96560?, 0xc002ff84c0?}, 0x3fbee00?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5/middleware.RequestID.func1({0x7f6c1bc96560, 0xc002ff84c0}, 0xc0087eafc0)
github.com/go-chi/chi/v5@v5.0.12/middleware/request_id.go:76 +0x20e
net/http.HandlerFunc.ServeHTTP(0xc0087eafc0?, {0x7f6c1bc96560?, 0xc002ff84c0?}, 0xc000bdf1d8?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5/middleware.RealIP.func1({0x7f6c1bc96560, 0xc002ff84c0}, 0xc0087eafc0)
github.com/go-chi/chi/v5@v5.0.12/middleware/realip.go:36 +0x95
net/http.HandlerFunc.ServeHTTP(0x6483170?, {0x7f6c1bc96560?, 0xc002ff84c0?}, 0x6?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/command.loadMiddlewares.Instrumenter.func36.1({0x494d170, 0xc001e7c5a0}, 0xc0087eafc0)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/metrics.go:20 +0x17c
net/http.HandlerFunc.ServeHTTP(0xbdf2f0?, {0x494d170?, 0xc001e7c5a0?}, 0x494a310?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/ocis-pkg/middleware.TraceContext.func1({0x494d170, 0xc001e7c5a0}, 0xc0087eaea0)
github.com/owncloud/ocis/v2/ocis-pkg/middleware/tracing.go:19 +0x168
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x494d170?, 0xc001e7c5a0?}, 0x494a310?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.tracer.ServeHTTP({{0x492d278?, 0xc00155a438?}, {0x493e210?, 0xc001525c20?}}, {0x494d170, 0xc001e7c5a0}, 0xc0087ead80)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/tracing.go:50 +0x474
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.(*middleware).serveHTTP(0xc0015509c0, {0x4945f48, 0xc0022edc00}, 0xc0087eab40, {0x492ebc0, 0xc0019a8980})
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.49.0/handler.go:225 +0x1243
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.NewMiddleware.func1.1({0x4945f48?, 0xc0022edc00?}, 0x4e366f?)
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.49.0/handler.go:83 +0x35
net/http.HandlerFunc.ServeHTTP(0x473479?, {0x4945f48?, 0xc0022edc00?}, 0xc000bdfb68?)
net/http/server.go:2166 +0x29
net/http.serverHandler.ServeHTTP({0xc00b4ec930?}, {0x4945f48?, 0xc0022edc00?}, 0x6?)
net/http/server.go:3137 +0x8e
net/http.(*conn).serve(0xc001c69cb0, {0x49527c0, 0xc00165dbc0})
net/http/server.go:2039 +0x5e8
created by net/http.(*Server).Serve in goroutine 242
net/http/server.go:3285 +0x4b4
2024/03/26 14:59:59 http: panic serving 192.168.90.254:35816: runtime error: invalid memory address or nil pointer dereference
goroutine 19102 [running]:
net/http.(*conn).serve.func1()
net/http/server.go:1898 +0xbe
panic({0x439f7c0?, 0x6473280?})
runtime/panic.go:770 +0x132
net/http.(*Client).deadline(0x61c385?)
net/http/client.go:193 +0xe
net/http.(*Client).do(0x0, 0xc007fae480)
net/http/client.go:608 +0x1f6
net/http.(*Client).Do(...)
net/http/client.go:590
net/http.(*Client).Get(0x0, {0xc002dccb90?, 0x0?})
net/http/client.go:487 +0x5f
github.com/owncloud/ocis/v2/services/proxy/pkg/staticroutes.(*StaticRouteHandler).oIDCWellKnownRewrite(0xc00141f188, {0x7f6c1bc96560, 0xc001091ec0}, 0x1?)
github.com/owncloud/ocis/v2/services/proxy/pkg/staticroutes/oidc_well-known.go:14 +0x73
net/http.HandlerFunc.ServeHTTP(0xc000fdc870?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0xc00934fe30?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).routeHTTP(0xc00155c780, {0x7f6c1bc96560, 0xc001091ec0}, 0xc007fae240)
github.com/go-chi/chi/v5@v5.0.12/mux.go:459 +0x2e6
net/http.HandlerFunc.ServeHTTP(0xc00b4ed1a0?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0xc00257dc40?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).ServeHTTP(0xc00155c780, {0x7f6c1bc96560, 0xc001091ec0}, 0xc007fae240)
github.com/go-chi/chi/v5@v5.0.12/mux.go:73 +0x32f
github.com/go-chi/chi/v5.(*Mux).Mount.func1({0x7f6c1bc96560, 0xc001091ec0}, 0xc007fae240)
github.com/go-chi/chi/v5@v5.0.12/mux.go:327 +0x1bb
net/http.HandlerFunc.ServeHTTP(0xc000fdc870?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0xc00934fb34?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).routeHTTP(0xc00155c720, {0x7f6c1bc96560, 0xc001091ec0}, 0xc007fae240)
github.com/go-chi/chi/v5@v5.0.12/mux.go:459 +0x2e6
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0x64775b0?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5.(*Mux).ServeHTTP(0xc00155c720, {0x7f6c1bc96560, 0xc001091ec0}, 0xc007fae120)
github.com/go-chi/chi/v5@v5.0.12/mux.go:90 +0x2ee
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.createHome.ServeHTTP({{0x4930460, 0xc00155c720}, {{{0x493da90, 0xc001537440}, 0x1, {0x0, 0x0}, {0xc001addc00, 0x12, 0x1f4}, ...}}, ...}, ...)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/create_home.go:44 +0x642
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.Policies.func1.1({0x7f6c1bc96560?, 0xc001091ec0?}, 0x49a3a0eef93fc216?)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/policies.go:52 +0x277
net/http.HandlerFunc.ServeHTTP(0x0?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0x0?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.selectorCookie.ServeHTTP({{0x492d278, 0xc0015680a0}, {{{0x493da90, 0xc001537440}, 0x1, {0x0, 0x0}, {0xc001addc00, 0x12, 0x1f4}, ...}}, ...}, ...)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/selector_cookie.go:36 +0x266
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.accountResolver.ServeHTTP({{0x4930fc0, 0xc000fe3400}, {{{0x493da90, 0xc001537440}, 0x1, {0x0, 0x0}, {0xc001addc00, 0x12, 0x1f4}, ...}}, ...}, ...)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/account_resolver.go:89 +0xb68
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.Authentication.func1.1({0x7f6c1bc96560, 0xc001091ec0}, 0xc007fae000)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/authentication.go:71 +0x3b7
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0x677cac0?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/router.Middleware.func1.1({0x7f6c1bc96560, 0xc001091ec0}, 0xc0074f5e60)
github.com/owncloud/ocis/v2/services/proxy/pkg/router/router.go:32 +0x23f
net/http.HandlerFunc.ServeHTTP(0xc00b4ecea0?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0xc002322f01?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.HTTPSRedirect.func1({0x7f6c1bc96560, 0xc001091ec0}, 0xc0074f5e60)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/https_redirect.go:17 +0x136
net/http.HandlerFunc.ServeHTTP(0x6483150?, {0x7f6c1bc96560?, 0xc001091ec0?}, 0xc00934fc80?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/command.loadMiddlewares.AccessLog.func37.1({0x7f6c1bc96560, 0xc001091e40}, 0xc0074f5e60)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/accesslog.go:21 +0x130
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x7f6c1bc96560?, 0xc001091e40?}, 0x3fbee00?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5/middleware.RequestID.func1({0x7f6c1bc96560, 0xc001091e40}, 0xc0074f5c20)
github.com/go-chi/chi/v5@v5.0.12/middleware/request_id.go:76 +0x20e
net/http.HandlerFunc.ServeHTTP(0xc0074f5c20?, {0x7f6c1bc96560?, 0xc001091e40?}, 0xc0023231d8?)
net/http/server.go:2166 +0x29
github.com/go-chi/chi/v5/middleware.RealIP.func1({0x7f6c1bc96560, 0xc001091e40}, 0xc0074f5c20)
github.com/go-chi/chi/v5@v5.0.12/middleware/realip.go:36 +0x95
net/http.HandlerFunc.ServeHTTP(0x6483170?, {0x7f6c1bc96560?, 0xc001091e40?}, 0x6?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/command.loadMiddlewares.Instrumenter.func36.1({0x494d170, 0xc0017aa900}, 0xc0074f5c20)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/metrics.go:20 +0x17c
net/http.HandlerFunc.ServeHTTP(0x23232f0?, {0x494d170?, 0xc0017aa900?}, 0x494a310?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/ocis-pkg/middleware.TraceContext.func1({0x494d170, 0xc0017aa900}, 0xc0074f5b00)
github.com/owncloud/ocis/v2/ocis-pkg/middleware/tracing.go:19 +0x168
net/http.HandlerFunc.ServeHTTP(0x49527c0?, {0x494d170?, 0xc0017aa900?}, 0x494a310?)
net/http/server.go:2166 +0x29
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware.tracer.ServeHTTP({{0x492d278?, 0xc00155a438?}, {0x493e210?, 0xc001525c20?}}, {0x494d170, 0xc0017aa900}, 0xc0074f59e0)
github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/tracing.go:50 +0x474
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.(*middleware).serveHTTP(0xc0015509c0, {0x4945f48, 0xc001408c40}, 0xc0074f57a0, {0x492ebc0, 0xc0019a8980})
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.49.0/handler.go:225 +0x1243
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.NewMiddleware.func1.1({0x4945f48?, 0xc001408c40?}, 0x4e366f?)
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.49.0/handler.go:83 +0x35
net/http.HandlerFunc.ServeHTTP(0x473479?, {0x4945f48?, 0xc001408c40?}, 0xc002622b68?)
net/http/server.go:2166 +0x29
net/http.serverHandler.ServeHTTP({0xc00b4ece70?}, {0x4945f48?, 0xc001408c40?}, 0x6?)
net/http/server.go:3137 +0x8e
net/http.(*conn).serve(0xc002009830, {0x49527c0, 0xc00165dbc0})
net/http/server.go:2039 +0x5e8
created by net/http.(*Server).Serve in goroutine 242
net/http/server.go:3285 +0x4b4
```
ownCloud Desktop app HTTP log:
```console
24-03-26 15:16:48:383 [ info gui.account.state ]: Invalid credentials for "https://owncloud.mydomain.net"
24-03-26 15:16:48:383 [ info gui.account.state ]: refreshing oauth
24-03-26 15:16:48:383 [ info gui.account.state ]: refreshing oauth failed
24-03-26 15:16:48:383 [ info gui.account.state ]: asking user
24-03-26 15:16:48:383 [ info gui.account.state ]: AccountState state change: OCC::AccountState::Connected -> OCC::AccountState::AskingCredentials
24-03-26 15:16:48:383 [ debug gui.account.settings ] [ OCC::AccountSettings::slotAccountStateChanged ]: showing modal dialog asking user to log in again via OAuth2
24-03-26 15:16:48:435 [ debug sync.credentials.oauth ] [ OCC::AccountBasedOAuth::startAuthentication ]: fetching dynamic registration data
24-03-26 15:16:48:435 [ info sync.credentials.manager ]: get "ownCloud_credentials:owncloud.mydomain.net:f35dd146-7a56-44d1-95ab-d9faa93137e1:http/clientSecret"
24-03-26 15:16:48:435 [ debug sync.credentials.manager ] [ OCC::CredentialJob::start ]: We don't know "http/clientSecret" skipping retrieval from keychain
24-03-26 15:16:48:439 [ debug sync.credentials.oauth ] [ OCC::AccountBasedOAuth::startAuthentication::::operator() ]: fetched dynamic registration data successfully
24-03-26 15:16:48:439 [ debug sync.credentials.oauth ] [ `anonymous-namespace'::logCredentialsJobResult ]: credentials job has finished
24-03-26 15:16:48:439 [ info sync.credentials.oauth ]: Failed to read client id ""
24-03-26 15:16:48:439 [ debug sync.credentials.oauth ] [ OCC::OAuth::startAuthentication ]: starting authentication
24-03-26 15:16:48:439 [ debug sync.credentials.oauth ] [ OCC::AccountBasedOAuth::fetchWellKnown ]: starting CheckServerJob before fetching "/.well-known/openid-configuration"
24-03-26 15:16:48:483 [ info sync.httplogger ]: "847ab280-8a2c-429b-bd31-fafb97fe4ac5: Request: GET https://owncloud.mydomain.net/status.php Header: { OC-Connection-Validator: desktop, User-Agent: Mozilla/5.0 (Windows) mirall/5.2.1.13040 (ownCloud, windows-10.0.22635 ClientArchitecture: x86_64 OsArchitecture: x86_64), Accept: */*, Accept-Language: en_NZ, X-Request-ID: 847ab280-8a2c-429b-bd31-fafb97fe4ac5, Original-Request-ID: 847ab280-8a2c-429b-bd31-fafb97fe4ac5, } Data: []"
24-03-26 15:16:48:681 [ info sync.httplogger ]: "847ab280-8a2c-429b-bd31-fafb97fe4ac5: Response: GET 200 (197ms) https://owncloud.mydomain.net/status.php Header: { Date: Tue, 26 Mar 2024 14:16:48 GMT, Content-Type: application/json, Transfer-Encoding: chunked, Connection: keep-alive, content-security-policy: default-src 'none';, permissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), vr=(), referrer-policy: same-origin, strict-transport-security: max-age=63072000; includeSubDomains; preload, vary: Accept-Encoding, Origin, x-content-type-options: nosniff, x-download-options: noopen, x-frame-options: SAMEORIGIN, x-permitted-cross-domain-policies: none, x-request-id: 847ab280-8a2c-429b-bd31-fafb97fe4ac5, x-robots-tag: none,noarchive,nosnippet,notranslate,noimageindex,, x-xss-protection: 1; mode=block, CF-Cache-Status: DYNAMIC, Report-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DKSGN%2BxXxHIFMm2fPf5%2B0dKs3u0fr4hKn4C79CYcVNQWUsY9KRqvLWnPBm8hHhfk5QpNGLfwtVjKhm13KJpRlt9uj2tED%2BVQM7L680xehEE50NtWeZq602lp6%2Bwup8lmR79frTV8Ag%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}, NEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}, Server: cloudflare, CF-RAY: 86a7c2b55db92f87-MAD, Content-Encoding: br, alt-svc: h3=\":443\"; ma=86400, } Data: [{\n \"installed\": true,\n \"maintenance\": false,\n \"needsDbUpgrade\": false,\n \"version\": \"10.11.0.0\",\n \"versionstring\": \"10.11.0\",\n \"edition\": \"Community\",\n \"productname\": \"Infinite Scale\",\n \"product\": \"Infinite Scale\",\n \"productversion\": \"5.1.0-prealpha+8f0b536ef\"\n}]"
24-03-26 15:16:48:681 [ info sync.checkserverjob ]: status.php returns: QJsonDocument({"edition":"Community","installed":true,"maintenance":false,"needsDbUpgrade":false,"product":"Infinite Scale","productname":"Infinite Scale","productversion":"5.1.0-prealpha+8f0b536ef","version":"10.11.0.0","versionstring":"10.11.0"}) QNetworkReply::NoError Reply: QNetworkReplyHttpImpl(0x1e1bd842750)
24-03-26 15:16:48:681 [ debug sync.credentials.oauth ] [ OCC::AccountBasedOAuth::fetchWellKnown::::operator() ]: CheckServerJob succeeded, fetching "/.well-known/openid-configuration"
24-03-26 15:16:48:681 [ debug sync.credentials.oauth ] [ OCC::OAuth::fetchWellKnown ]: fetching "/.well-known/openid-configuration"
24-03-26 15:16:48:725 [ info sync.httplogger ]: "fe9ce41f-3b17-46b5-aa62-3f93f3d39c07: Request: GET https://owncloud.mydomain.net/.well-known/openid-configuration Header: { User-Agent: Mozilla/5.0 (Windows) mirall/5.2.1.13040 (ownCloud, windows-10.0.22635 ClientArchitecture: x86_64 OsArchitecture: x86_64), Accept: */*, Accept-Language: en_NZ, X-Request-ID: fe9ce41f-3b17-46b5-aa62-3f93f3d39c07, Original-Request-ID: fe9ce41f-3b17-46b5-aa62-3f93f3d39c07, } Data: []"
24-03-26 15:16:48:826 [ info sync.httplogger ]: "fe9ce41f-3b17-46b5-aa62-3f93f3d39c07: Response: GET 502 (Error: Error transferring https://owncloud.mydomain.net/.well-known/openid-configuration - server replied: Bad Gateway,101ms) https://owncloud.mydomain.net/.well-known/openid-configuration Header: { Date: Tue, 26 Mar 2024 14:16:48 GMT, Content-Type: text/html; charset=UTF-8, Content-Length: 6360, Connection: keep-alive, Report-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YXdXNTsgTw%2BO%2BEdAoBF80NlI9SI%2BuEeyARPPeTQ275MgP1X3tPjC0XP1A79g8FuOcDM2rsmIrol2bVl4rw1tGTULDyO4oeFL6sIu1P5CcejUdEpRoasYRX2oMnvGB5r4oom8w%2BHybg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}, NEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}, X-Frame-Options: SAMEORIGIN, Referrer-Policy: same-origin, Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, Expires: Thu, 01 Jan 1970 00:00:01 GMT, Server: cloudflare, CF-RAY: 86a7c2b6df9f8675-MAD, alt-svc: h3=\":443\"; ma=86400, } Data: [\n\n\n\n \n\n\n\nowncloud.mydomain.net | 502: Bad gateway\n\n\n\n\n\n\n\n\n\n\n
\n Bad gateway\n Error code 502\n
\n\n \n Browser\n \n
\n Working\n\n \n Host\n \n
\n Error\nWhat happened?
\nThe web server reported a bad gateway error.
\nWhat can I do?
\nPlease try again in a few minutes.
\n```
I'm using the latest version of both the Desktop app and the ocis / keycloak containers:
```
~ $ ocis version
Version: 5.1.0-prealpha+8f0b536ef
Compiled: 2024-03-26 00:00:00 +0000 UTC
```
thanks!
Contributor guide
Assessment
This issue has not been assessed yet.