logto-io / logto

🧑‍🚀 The better identity infrastructure for developers and the open-source alternative to Auth0.
https://logto.io
Mozilla Public License 2.0
8.77k stars 441 forks source link

bug: Not able to work as OIDC to Cloudflare Zero Trust #6242

Closed a-w-1806 closed 3 months ago

a-w-1806 commented 4 months ago

Describe the bug

I am trying to set up my self-hosted Logto instance as OIDC to my Cloudflare Zero Trust. Per instructions here: https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/generic-oidc/.

I also have Always issue refresh token turned on.

However, when testing if it works, I get something like this:

image

Expected behavior

Be able to sign in with OIDC to Cloudflare Zero Trust.

How to reproduce?

Try to set up Logto as OIDC with instructions here: https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/generic-oidc/

Context

Screenshots

a2008q commented 3 months ago

This may cause by signing algorithm. You can rotate OIDC private signing keys to RSA. Here is the docs https://docs.logto.io/docs/references/using-cli/rotate-signing-keys

wangsijie commented 3 months ago

@a2008q Thanks, I am adding this useful notice to the docs.

@a-w-1806 I am closing this now, feel free to reopen if you have any futher questions.

a-w-1806 commented 3 months ago
image

Folks, I just tried again but still the same issue

a-w-1806 commented 3 months ago

And it does not seem like I can re-open this issue haha

MoreMLDev commented 3 months ago

i can confirm the issue still exists after changing the algorithm to RSA in Logto, the log in Logto seems fine but cloudflare only showing the error post above.

a-w-1806 commented 3 months ago

i can confirm the issue still exists after changing the algorithm to RSA in Logto, the log in Logto seems fine but cloudflare only showing the error post above.

@MoreMLDev I just opened a new issue #6428 since I don't see I can reopen this one.