goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
12.79k stars 851 forks source link

Profile URL of Social Source Azure ID keeps resetting itself to different value #10829

Open nriel opened 1 month ago

nriel commented 1 month ago

Describe the bug I added Azure ID as a social login source. Everything is working fine with Profile URL set to https://graph.microsoft.com/v1.0/me But, for some reason, the value keeps changing to https://graph.microsoft.com/oidc/userinfo With this automatic change, the authentication flow does not work, as no user values are being transferred from Microsoft to Authentik.

I am running Beta version [b9bf01f]:(https://github.com/goauthentik/authentik/commit/b9bf01f693e09b4a04bf47dbce81ae04bc90f519)

To Reproduce Steps to reproduce the behavior:

  1. Go to ' Federation and Social login
  2. Click on Azure AD
  3. Scroll down to Profile URL
  4. Change to value: https://graph.microsoft.com/v1.0/me
  5. Revisit after a few minutes/hours. Value auto changed to https://graph.microsoft.com/oidc/userinfo

Expected behavior Keep stored value of https://graph.microsoft.com/v1.0/me and do not change without user interaction.

Could this be due to changing from 2024.6.3 stable back to beta? When changing docker image to 2024.6.3 stable, I see quite a few database errors because of non existing values inside postgres. Which is why I came back to the beta channel.

Things I tried without look:

I guess that somewhere in the program code, the URL is saved and added to all Azure sources?

nriel commented 1 month ago

Seems to be related to: https://github.com/goauthentik/authentik/pull/8147

Is there a merged version I can update to from the current beta release?

nriel commented 1 month ago

Removing the "OIDC Well-known URL" inside the source preloaded values seems to have fixed it temporarily.