search

microsoft / BotFramework-Services

Microsoft Bot Framework Services
Creative Commons Attribution 4.0 International
38 stars 11 forks source link

ServiceError - Missing session cookie when using Generic Oauth 2 Service Provider with Auth0 #343

Closed darrenparkinson closed 2 years ago

darrenparkinson commented 2 years ago

I'm trying to set up Auth0 as a Service Provider in the Azure Bot configuration for use with Microsoft Teams.

I'm getting the sign in box pop up in teams and Auth0 sends me an email to complete the login, but when clicking the link in the email I just receive the following error:

{
  "error": {
    "code": "ServiceError",
    "message": "Missing session cookie (consent<removed>) in consent redirect request."
  }
}

The service provider connection settings are as follows:

Service Provider: Generic Oauth 2 Client id: client id of the Auth0 app Client secret: secret from the Auth0 app Authorization URL: https://ourdomain.eu.auth0.com/authorize Token URL: https://ourdomain.eu.auth0.com/oauth/token Refresh URL: https://ourdomain.eu.auth0.com/authorize Token Exchange URL: Scopes:

Any assistance would be greatly appreciated. Many thanks.

InfinytRam commented 2 years ago

Hi @darrenparkinson, I'm investigating this issue.

xieofxie commented 2 years ago

@darrenparkinson our login requires session cookie to be present. so if you don't signin in the same browser (from an email link etc.), the signin will fail. In the same browser, auth0 will work

InfinytRam commented 2 years ago

Closing due to inactivity. @darrenparkinson, please re-open if needed.