goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.46k stars 899 forks source link

Log in in Portainer by OAuth error "Failure Unauthorized" #11744

Open seniyakk opened 2 weeks ago

seniyakk commented 2 weeks ago

Describe the bug I set up Oauth for Portainer last year, and everything worked fine. But today, I could not log in to Portainer via OAuth. I got "Failure Unauthorized", " Unable to login via OAuth". I tried to follow the instructions https://docs.goauthentik.io/integrations/services/portainer/ with the new Provider and Application. But get the same error. Nothing has changed in the configuration of services. I did not touch anything. In the logs, I did not find anything suspicious.

To Reproduce Steps to reproduce the behavior:

  1. Go to 'Portainer'
  2. Click on 'Login with OAuth'
  3. See error "Failure Unauthorized", " Unable to login via OAuth".

Expected behavior Login in Portainer

Screenshots

Screenshot 2024-10-20 at 09 28 21

Logs {"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/flows/-/default/authentication/?next=/", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "HEAD", "pid": 482614, "remote": "10.255.255.6", "request_id": "2a9b1ca793ec47379695176e3bc0e0f9", "runtime": 9, "schema_name": "public", "scheme": "http", "status": 302, "timestamp": "2024-10-20T14:39:31.187175", "user": "", "user_agent": ""} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.252","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.582","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "unauthenticated", "domain_url": "authentik", "event": "/if/flow/default-authentication-flow/?next=%2F", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "HEAD", "pid": 482614, "remote": "10.255.255.6", "request_id": "0f663cfb75a24822be84710bd337feb7", "runtime": 15, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-10-20T14:39:31.214473", "user": "", "user_agent": ""} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.319","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.307","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.608","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "secret_key", "domain_url": "authentik", "event": "/api/v3/events/events/per_month/?action=login", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "10.255.255.6", "request_id": "222673dba1c54ffeae3a6c34ba02b7d4", "runtime": 32, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-10-20T14:39:31.273055", "user": "ak-outpost-aae75ce181fe4aa1baf2015004093b12", "user_agent": ""} {"auth_via": "secret_key", "domain_url": "authentik", "event": "/api/v3/core/users/?page_size=1", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "10.255.255.6", "request_id": "b739118aece6462e8b59eeebf71f8261", "runtime": 53, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-10-20T14:39:31.295489", "user": "ak-outpost-aae75ce181fe4aa1baf2015004093b12", "user_agent": ""} {"auth_via": "secret_key", "domain_url": "authentik", "event": "/api/v3/events/events/per_month/?action=login_failed", "host": "authentik:9000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "10.255.255.6", "request_id": "6a1547a3b28a4cd8a2866a0755653294", "runtime": 55, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-10-20T14:39:31.298326", "user": "ak-outpost-aae75ce181fe4aa1baf2015004093b12", "user_agent": ""} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.572","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"2.025","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.512","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:31Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.577","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:34Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.935","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:34Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/outpost.goauthentik.io/auth/traefik","host":"home.company","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"Homepage (Forward Auth)","remote":"69.1.57.112","runtime":"0.396","scheme":"http","size":0,"status":0,"timestamp":"2024-10-20T14:39:34Z","user":"adminname","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "4077535994e74bc99b8422dc4c5fa81e", "runtime": 12, "schema_name": "public", "scheme": "https", "status": 302, "timestamp": "2024-10-20T14:39:35.485672", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/if/user/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "7984a1afcf524203931f1784e11419df", "runtime": 28, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:35.549014", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/static/dist/user/UserInterface-2024.8.3.js","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"28.258","scheme":"http","size":493888,"status":200,"timestamp":"2024-10-20T14:39:35Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/if/user/assets/fonts/RedHatText/RedHatText-Regular.woff2","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"2.212","scheme":"http","size":28169,"status":200,"timestamp":"2024-10-20T14:39:35Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/root/config/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "31376203941847baab473ede213b51d6", "runtime": 17, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:35.858343", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/static/dist/user/chunk-CESB3SAS.js","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"2.295","scheme":"http","size":19823,"status":200,"timestamp":"2024-10-20T14:39:35Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/static/dist/user/chunk-EDKSZH7L.js","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"2.730","scheme":"http","size":328,"status":200,"timestamp":"2024-10-20T14:39:35Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/brands/current/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "3642ece2d58d42dbb6e7cebcb0b9bbd4", "runtime": 27, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:35.867724", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/static/dist/user/chunk-HXQSZGGY.js","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"14.037","scheme":"http","size":104865,"status":200,"timestamp":"2024-10-20T14:39:35Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/static/dist/user/chunk-RXNCPCRW.js","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"30.639","scheme":"http","size":796198,"status":200,"timestamp":"2024-10-20T14:39:35Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"domain_url": null, "event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 481077, "remote": "69.1.57.112", "schema_name": "public", "scheme": "ws", "timestamp": "2024-10-20T14:39:36.468991", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/root/config/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "671715d454e540ec97aadce50a69907e", "runtime": 27, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:36.475054", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/enterprise/license/summary/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "766f09c7dd2649839cadb8ab437a6889", "runtime": 28, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:36.476137", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/brands/current/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "7c8b053e95ae4aea82347848a1916d8a", "runtime": 42, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:36.489811", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/users/me/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "e35557b8a9c7400790625f49a5cc6a7d", "runtime": 48, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:36.495435", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/if/user/assets/fonts/RedHatDisplay/RedHatDisplay-Medium.woff2","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"3.312","scheme":"http","size":28661,"status":200,"timestamp":"2024-10-20T14:39:36Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/if/user/assets/fonts/webfonts/fa-solid-900.woff2","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"9.402","scheme":"http","size":79100,"status":200,"timestamp":"2024-10-20T14:39:36Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/events/notifications/?ordering=-created&seen=false&user=6", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "bc972f7a705f4a8a8c87acbdc1ffc9c8", "runtime": 28, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:36.642614", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/events/notifications/?ordering=-created&page_size=1&seen=false&user=6", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "3505b4814d8b4d24a0047eeee04068da", "runtime": 48, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:36.664843", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/applications/?only_with_launch_url=true&ordering=name&page=1&page_size=100", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "7ce335bb25054132926b166dc1bcef83", "runtime": 821, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:37.438671", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/if/user/assets/fonts/RedHatDisplay/RedHatDisplay-Bold.woff2","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"1.978","scheme":"http","size":29045,"status":200,"timestamp":"2024-10-20T14:39:37Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/static/dist/user/UserSettingsPage-NKCQMCKX.js","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"32.643","scheme":"http","size":617875,"status":200,"timestamp":"2024-10-20T14:39:42Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "f(exec): Found existing plan for other flow, deleting plan", "flow_slug": "default-user-settings-flow", "host": "authentik.company", "level": "warning", "logger": "authentik.flows.views.executor", "other_flow": "52606c089c7c46aba19d6373f01ff7a5", "pid": 482614, "request_id": "2a98da590b14472a91b35d62a7d2a326", "schema_name": "public", "timestamp": "2024-10-20T14:39:42.824614"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/tokens/?managed=&ordering=expires&page=1&page_size=20&search=&user__username=adminname", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "35734e88e5cf4679a0445e2e9743674c", "runtime": 43, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.831934", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/sources/all/user_settings/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "0ad6b503c0954a0e88489f7642d4ba8b", "runtime": 50, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.839503", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/authenticated_sessions/?ordering=-expires&page=1&page_size=20&user__username=adminname", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "a3c4664b4bc649cc829af650e1a3ab8c", "runtime": 70, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.853430", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/stages/all/user_settings/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 481077, "remote": "69.1.57.112", "request_id": "fbe5e071e6ab438d9f60a6e6f15c761c", "runtime": 81, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.859038", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/authenticators/all/", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "07c64f9bfd3a4beea178c3c6a973433d", "runtime": 71, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.860747", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/flows/executor/default-user-settings-flow/?query=", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "2a98da590b14472a91b35d62a7d2a326", "runtime": 152, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.936366", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/sources/user_connections/all/?user=6", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "2121573b01e547828c6b38fc8bfef09b", "runtime": 68, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:42.963757", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/if/user/assets/fonts/RedHatText/RedHatText-Medium.woff2","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"0.844","scheme":"http","size":29049,"status":200,"timestamp":"2024-10-20T14:39:43Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "session", "domain_url": "authentik.company", "event": "/api/v3/core/user_consent/?ordering=-expires&page=1&page_size=20&user=6", "host": "authentik.company", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 482614, "remote": "69.1.57.112", "request_id": "8baa909d4f354f31858d128533d94868", "runtime": 306, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-10-20T14:39:43.103136", "user": "adminname", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"event":"/if/user/assets/fonts/overpass-webfont/overpass-light.woff2","host":"authentik.company","level":"info","logger":"authentik.router","method":"GET","remote":"69.1.57.112","runtime":"1.667","scheme":"http","size":34472,"status":200,"timestamp":"2024-10-20T14:39:48Z","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"} {"auth_via": "unauthenticated", "domain_url": "0.0.0.0", "event": "/-/health/live/", "host": "0.0.0.0:9000", "level": "info", "logger": "authentik.asgi", "method": "HEAD", "pid": 482614, "remote": "127.0.0.1", "request_id": "4e880e66e6424c02b7c1ab1a10516286", "runtime": 7, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-10-20T14:39:55.004099", "user": "", "user_agent": "goauthentik.io/healthcheck"} {"auth_via": "unauthenticated", "domain_url": "0.0.0.0", "event": "/-/health/live/", "host": "0.0.0.0:9000", "level": "info", "logger": "authentik.asgi", "method": "HEAD", "pid": 481077, "remote": "127.0.0.1", "request_id": "716dd752431149408de161813caaa7d1", "runtime": 7, "schema_name": "public", "scheme": "http", "status": 200, "timestamp": "2024-10-20T14:40:25.124042", "user": "", "user_agent": "goauthentik.io/healthcheck"}

Version and Deployment (please complete the following information):

miccico commented 5 days ago

Did you find a solution to this? I have found the same behavior today. Nothing changed and logins not working. One strange thing i find is that it not only happens in portainer but in nextcloud as well. What both have in common is that i see a failed request on my reverse proxy towards the authentik instance that translates to "method not allowed". In some internet research i saw people writing about this happening when the request is made as a GET but this error happens to me with POST as well. Nothing in the logs of authentik that i could find. i am on version 2024.10.0

[31/Oct/2024:23:11:06 +0100] xx.xxxxx.xxxxx.xx:8443 - 10.xx.xx.21 - 7EhE8wN2UU29AxxxxxxxxxxxxxxxxylfoDJBbgj "POST /application/o/token/ HTTP/2.0" 405 23 "-" "Go-http-client/2.0" "-" [31/Oct/2024:23:11:06 +0100] xx.xxxxx.xxxxx.xx:8443 - 10.xx.xx.21 - - "POST /application/o/token/ HTTP/2.0" 405 23 "-" "Go-http-client/2.0" "-"

Thanks

Michael

seniyakk commented 2 days ago

No. I still have it. I have reviewed many forums but have not gotten a solution yet. Such a problem is not only with Portainer but other services as well.