openanalytics / shinyproxy

ShinyProxy - Open Source Enterprise Deployment for Shiny and data science apps
https://www.shinyproxy.io
Apache License 2.0
523 stars 152 forks source link

Cannot configure OpenID (Okta) as authentication method #524

Closed ggarza31416 closed 1 month ago

ggarza31416 commented 1 month ago

I have been struggling trying to configure my Okta app as authentication method for my ShinyProxy installation. These are my configuration values:

  proxy:
    admin-groups: scientists
    authentication: openid
    openid:
      auth-url: https://my-okta-domain.com/oauth2/v1/authorize
      token-url: https://my-okta-domain.com/oauth2/v1/token
      jwks-url: https://my-okta-domain.com/oauth2/v1/keys
      client-id: <redacted>
      client-secret: <redacted>

In my Okta app I have just configured just the next value: Sign-in redirect URIs: https://my-shinyproxy.domain

Does anyone know what is missing here?

Also, I have checked the logs from ShinyProxy but it is not showing any error.

LEDfan commented 1 month ago

Hi, your configuration looks correct. What issue are you experiencing?

Sign-in redirect URIs: https://my-shinyproxy.domain

Make sure to include either a wildcard as path or the correct path (https://shinyproxy.io/documentation/configuration/#registering-shinyproxy-in-the-idp).

ggarza31416 commented 1 month ago

@LEDfan I was finally able to make it work. I had to use the suffix /login/oauth2/code/shinyproxy and add the Callback URI too. This is how it looks in Okta:

Sign-in redirect URIs: https://my-shinyproxy.domain/login/oauth2/code/shinyproxy Callback URI: https://my-shinyproxy.domain/login/oauth2/code/shinyproxy

Thanks for the help.