go-gitea / gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
https://gitea.com
MIT License
43.01k stars 5.31k forks source link

Update password forced after OIDC auth following container restart #31403

Open rdmcguire opened 2 weeks ago

rdmcguire commented 2 weeks ago

Description

Following upgrade to 1.22.0, I am confronted with the "Update Password" form following authentication from provisioned OIDC provider. If I do set the password (not sure what this is for since I'm authenticating via OIDC) I can sign in and subsequently sign out / back in without being prompted by the form. The issue comes back if the Gitea pod restarts.

Gitea is installed via helm, chart version gitea-10.2.0. This did not happen prior to the upgrade to 1.22.0.

Gitea Version

1.22.0

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

linux/kubernetes

How are you running Gitea?

Gitea is deployed to kubernetes via helm. OIDC provider is keycloak.

Database

PostgreSQL

wxiaoguang commented 1 week ago

It seems something wrong but I couldn't really understand the full context.

Could you elaborate the details? If you could provide a reproducible setup with detailed steps (sample: https://github.com/go-gitea/gitea/issues/30680#issuecomment-2076299869) , then it would be easier to figure out what's wrong.