logto-io / logto

🧑‍🚀 The better identity infrastructure for developers and the open-source alternative to Auth0.
https://logto.io
Mozilla Public License 2.0
8.15k stars 395 forks source link

bug: Not able to work as OIDC to Cloudflare Zero Trust #6242

Closed a-w-1806 closed 1 month ago

a-w-1806 commented 1 month ago

Describe the bug

I am trying to set up my self-hosted Logto instance as OIDC to my Cloudflare Zero Trust. Per instructions here: https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/generic-oidc/.

I also have Always issue refresh token turned on.

However, when testing if it works, I get something like this:

image

Expected behavior

Be able to sign in with OIDC to Cloudflare Zero Trust.

How to reproduce?

Try to set up Logto as OIDC with instructions here: https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/generic-oidc/

Context

Screenshots

a2008q commented 1 month ago

This may cause by signing algorithm. You can rotate OIDC private signing keys to RSA. Here is the docs https://docs.logto.io/docs/references/using-cli/rotate-signing-keys

wangsijie commented 1 month ago

@a2008q Thanks, I am adding this useful notice to the docs.

@a-w-1806 I am closing this now, feel free to reopen if you have any futher questions.

a-w-1806 commented 4 weeks ago
image

Folks, I just tried again but still the same issue

a-w-1806 commented 4 weeks ago

And it does not seem like I can re-open this issue haha

MoreMLDev commented 1 week ago

i can confirm the issue still exists after changing the algorithm to RSA in Logto, the log in Logto seems fine but cloudflare only showing the error post above.

a-w-1806 commented 1 week ago

i can confirm the issue still exists after changing the algorithm to RSA in Logto, the log in Logto seems fine but cloudflare only showing the error post above.

@MoreMLDev I just opened a new issue #6428 since I don't see I can reopen this one.