Skip to content

"Token not active" error when logging in via OIDC #8537

Closed
@smolinari

Description

@smolinari

Hi,

Before 0.25, I could log in to my Keycloak instance via another application and then come to my Coder instance and click on the "Open ID Connect" button and since my OIDC session was already started, I would be logged in immediately.

Now, when I click the button, I get this:

{"message":"Could not refresh expired Oauth token.","detail":"oauth2: \"invalid_grant\" \"Token is not active\""}

If I delete all cookies, I get the Keycloak log in screen, and I can log in (again) via Keycloak and then everything works as it should.

I believe something is (still?) wrong with the OIDC refresh process and I'm uncertain it is now my setup or an actual issue.

Scott

Coder version: 0.26.1
Environment: k8s

Metadata

Metadata

Assignees

Labels

need-helpAssign this label prompts an engineer to check the issue. Only humans may set this.s2Broken use cases or features (with a workaround). Only humans may set this.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions