Open Cheezzhead opened 3 weeks ago
it should be in your management.json https://
the mangement.json itself is mounted as a volume in the docker-compose.yml in the management service
Actually I have the similar issue. I am using Zitadel - I was wondering what is the use of below which is setup in the management.json . I am using zitadel and I am not using this redirect URL. Even if I setup this up, where would this point to since myzitadel server is seperate from say netbird server?
"RedirectURLs": [
"http://localhost:53000"
it should be in your management.json https://
/application/o/netbird/.well-known/openid-configuration", the mangement.json itself is mounted as a volume in the docker-compose.yml in the management service
Yes, I modified my original post to include the netbird management service config. the management.json
is indeed mounted as a volume, but I'm still getting the wrong redirect localhost.
The only property in management.json
that would seemingly be relevant to this is OIDCConfigEndpoint
, which in my setup is definitely pointing towards the right domain, and changing that doesn't seem to do anything. I don't really see what else would/could be responsible for this, but maybe you can point me in the right direction.
@manju-rn I believe that destination is for OIDC device authorization flow (Specifically PKCE flow), which I'm not well-versed about but should be localhost in most cases. The port is specified in netbird's provided setup.env script:
# -------------------------------------------
# OIDC PKCE Authorization Flow
# -------------------------------------------
# Comma separated port numbers. if already in use, PKCE flow will choose an available port from the list as an alternative
# eg. 53000,54000
NETBIRD_AUTH_PKCE_REDIRECT_URL_PORTS="53000"
Facing the same issue
Describe the problem
I get an
Error: Unauthenticated
message upon opening the dashboard homepage. Checking the browser's development console, it is attempting to fetch the OIDC configuration fromhttp://localhost/.well-known/openid-configuration
which is obviously wrong. I can't find the (environment?) variable to change this.Additionally (not sure if related), but the setup script generates an
openid-configuration.json
file which is never used in the generated compose file. Is this intentional?To Reproduce
Relevant part from
docker-compose.yml
:management.json
:Expected behavior
The configuration should be retrieved from
https://auth.domain.tld/.well-known/oidc-configuration
.Are you using NetBird Cloud?
Self-hosted
NetBird version
0.28.7