Skip to content

OIDC refresh tokens should not require user interaction (OR possibly need a clearer error message) #9268

@hh

Description

@hh

I get the following error displayed, which requires me do do some action (usually clicking or refreshing the page) that I think should be handled by coder itself when using OIDC.

> oauth2: "invalid_grant"

"The provided authorization grant or refresh token is invalid, expired, revoked,
 does not match the redirection URI used in the authorization request,
 or was issued to another client"

image

I'm configured coder for Authentik OIDC via env vars here:

https://github.com/cloudnative-coop/infra/blob/uk/apps/coder/helm-release.yaml#L106-L140

I'm configured Authentik with a coder OIDC Provider as follows:

image

image

Metadata

Metadata

Assignees

Labels

s1Bugs that break core workflows. Only humans may set this.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions