owncloud / openidconnect

OpenId Connect (OIDC) Integration for ownCloud
GNU General Public License v2.0
6 stars 3 forks source link

OpenIDConnect stopped working after upgrading OC to 10.12 #287

Closed bibiak1 closed 1 year ago

bibiak1 commented 1 year ago

Got an error on webUI: Error in OpenIdConnect:Cannot supply multiple client credentials. Use one of the following: credentials in the Authorization header, credentials in the post body, or a client_assertion in the post body.

Tried to modify openidconnect settings without a luck. In the best scenario I've got logout every time I've login. I'm using autodiscovery.

bibiak1 commented 1 year ago

If i remove 'client_secret_basic' from 'token_endpoint_auth_methods_supported' array it pass but then i find "message":"Calling Application:logout" in logfile

bibiak1 commented 1 year ago

{"reqId":"td3I7tt5DkOtOuxwiUcV","level":0,"time":"2023-03-20T08:57:14+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/apps\/openidconnect\/redirect","message":"Before openid->authenticate"}
{"reqId":"SwPKNXlnfMIaSpT4sM9s","level":0,"time":"2023-03-20T08:57:17+00:00","remoteAddr":"127.0.0.1","user":"--","app":"OC\\Authentication\\Token\\DefaultTokenProvider::invalidateToken","method":"GET","url":"\/status.php","message":"invalidating token 1d96005a31e5709d7b4a7fa26e922fbb223b7291a96cc98c711741cbb63842aa0c95770fb82f87a89beecc0ebe593ee04d7e2c0720ec6fa8f5cb5ad161e8c596"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:24+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Entering LoginFlowController::login"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:24+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Before openid->authenticate"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:26+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"LoginFlowController::login : Token info: {\n    \"access_token\": \"eyJraWQiOiJMT2lMWmtIa0FtVkNnUVlsbUdtWWJXODdMMUE5SWF2ZFdsSExtN0ZLeS1BIiwiYWxnIjoiUlMyNTYifQ.eyJ2ZXIiOjEsImp0aSI6IkFULlYyQnBiQlZTekVxRFNVYXdGSGdWODJNTk5sX25KMGhyTXZWa3hXSXVoaE0iLCJpc3MiOiJodHRwczovL2Nvbm5lY3Qua3luZHJ5bC5uZXQiLCJhdWQiOiJodHRwczovL2Nvbm5lY3Qua3luZHJ5bC5uZXQiLCJzdWIiOiJNYXJjaW4uQmljemFuQGt5bmRyeWwuY29tIiwiaWF0IjoxNjc5MzAyNjQ1LCJleHAiOjE2NzkzMDYyNDUsImNpZCI6IjBvYTJvZDhwM2M4SFpHWEV5Njk3IiwidWlkIjoiMDB1MWllNDY3NmJOV001ZHQ2OTciLCJzY3AiOlsib3BlbmlkIiwicHJvZmlsZSIsImVtYWlsIl0sImF1dGhfdGltZSI6MTY3OTMwMjY0M30.Oj8r7WxnuN-jkl-_cGJBRIsgbZejB1wR6YndF6qF6Fbw3Ok972_m8B2kVU4BGjRKS2JOJi6N1S3oaVaMCw6tTLFvhsyflFlRb3KUUTPdHS-gAqGknkqFvNlA0BIW0h3AJl2PVaXwdZYX6tYOsT2LTUmePEloL3w60IJoKXLvgWVobY3sB32Ge1sUiPTupw6ncMaBTjvuHvXZKJ4wxrGv8Ia25icLP4BjZ1vSAweqPEaJPkw1Mv1fUUPoStuM5SbxDC0d4LSIq4_051e1nT3batRTnfnQNB6bvTDgT3bn-Gy1K5oUR11a8T6hVsKp6VMwGX2_G_cJudCjCgs1PLC6vw\",\n    \"refresh_token\": null,\n    \"id_token\": \"eyJraWQiOiJMM0pFTUJBb3JCMDlqaURJalBxSFpZR0s2WlhGUGVDZlpncVpsVzM3V1U4IiwiYWxnIjoiUlMyNTYifQ.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.kL1mjJpcWBLvbuDd8vBfS2cQZKTREKHn8YkCZF7CrdGLjv6ZCXr3ej7G5n-XtLgeW15vywd79FiEY4NsYJNTVKEioJMgqq8FdUAUT1kiH1xyvP75g8hkinM2UXZYaqt3il5t1Gc-6-mnVv0BOwb9j5zYk64e7k0sJ8ObFHPmujdLlZxE0tVDkfxU4p18a8YsDheGnNtmN8IG7GW-A_kn4ZeeR1rbiR9njvpOV2sS36Aqiv3EYvz9OMvbW5vWLtGNdolue5nkKX1FjtBRFd3qd5iIDrLxgTaNg8QjZTegAw_RjZ57Y_Yp1keSgy-vrMEjGwgfXl2aIPtA42c_5pPA-A\",\n    \"access_token_payload\": {\n        \"ver\": 1,\n        \"jti\": \"AT.V2BpbBVSzEqDSUawFHgV82MNNl_nJ0hrMvVkxWIuhhM\",\n        \"iss\": \"https:\\\/\\\/connect.xxxxxxx.net\",\n        \"aud\": \"https:\\\/\\\/connect.xxxxxxx.net\",\n        \"sub\": \"xxxxxxx@xxxxxxx.com\",\n        \"iat\": 1679302645,\n        \"exp\": 1679306245,\n        \"cid\": \"0oa2od8p3c8HZGXEy697\",\n        \"uid\": \"00u1ie4676bNWM5dt697\",\n        \"scp\": [\n            \"openid\",\n            \"profile\",\n            \"email\"\n        ],\n        \"auth_time\": 1679302643\n    }\n}"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:27+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"User info: {\"sub\":\"00u1ie4676bNWM5dt697\",\"name\":\"Marcin Biczan\",\"locale\":\"en_US\",\"email\":\"xxxxxxx@xxxxxxx.com\",\"preferred_username\":\"xxxxxxx@xxxxxxx.com\",\"given_name\":\"Marcin\",\"family_name\":\"Biczan\",\"zoneinfo\":\"America\\\/Los_Angeles\",\"updated_at\":1665591657,\"email_verified\":true}"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":1,"time":"2023-03-20T08:57:27+00:00","remoteAddr":"9.242.91.75","user":"--","app":"no app in context","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Creating new account with UID oidc-user-5fcdef5b96540364f58abce22686fcf7 and backend OC\\User\\Database"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:27+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OC\\User\\SyncService","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Setting home for <oidc-user-5fcdef5b96540364f58abce22686fcf7> to <\/mnt\/data\/files\/oidc-user-5fcdef5b96540364f58abce22686fcf7>"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:27+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OC\\User\\SyncService","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Setting displayName for <oidc-user-5fcdef5b96540364f58abce22686fcf7> to <oidc-user-5fcdef5b96540364f58abce22686fcf7>"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:28+00:00","remoteAddr":"9.242.91.75","user":"--","app":"no app in context","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"AutoProvisioningService: setting e-mail to 00u1ie4676bNWM5dt697"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:28+00:00","remoteAddr":"9.242.91.75","user":"--","app":"PHP","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Undefined property: stdClass::$cn at \/var\/www\/owncloud\/apps\/openidconnect\/lib\/Client.php#273"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:28+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OC\\Authentication\\Token\\DefaultTokenProvider::generateToken","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"generating token ac3aadf0cb36f031a63efd463eb128aa7ddcf01e255868bc976cdcd3b32283ad266f691769532c8fed67c429579b6832e03255ecb280b1c79f412cee0c68f698, uid oidc-user-5fcdef5b96540364f58abce22686fcf7, loginName oidc-user-5fcdef5b96540364f58abce22686fcf7, pwd empty, name Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/605.1.15 (KHTML, like Gecko) Version\/16.3 Safari\/605.1.15, type temporary"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:28+00:00","remoteAddr":"9.242.91.75","user":"--","app":"core","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"OC\\Authentication\\LoginPolicies\\GroupLoginPolicy policy registered"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":1,"time":"2023-03-20T08:57:28+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OC\\User\\Session::loginInOwnCloud","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"login oidc-user-5fcdef5b96540364f58abce22686fcf7 using \"OCA\\OpenIdConnect\\OpenIdConnectAuthModule\" login type"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:28+00:00","remoteAddr":"9.242.91.75","user":"oidc-user-5fcdef5b96540364f58abce22686fcf7","app":"files_skeleton","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"copying skeleton for oidc-user-5fcdef5b96540364f58abce22686fcf7 from \/var\/www\/owncloud\/core\/skeleton to \/oidc-user-5fcdef5b96540364f58abce22686fcf7\/files\/"}
{"reqId":"DuoWHFTvTUkew5XJF2Q8","level":0,"time":"2023-03-20T08:57:31+00:00","remoteAddr":"9.242.91.75","user":"oidc-user-5fcdef5b96540364f58abce22686fcf7","app":"OpenID","method":"GET","url":"\/index.php\/apps\/openidconnect\/redirect?code=a1-ywOqE7ovbEFfWLoKoQ-pzIj838UihBiwDFzdN7iw&state=46ed5cbc721b1095a42545151e689fc5","message":"Id token holds no sid: {\"sub\":\"00u1ie4676bNWM5dt697\",\"name\":\"Marcin Biczan\",\"email\":\"xxxxxxx@xxxxxxx.com\",\"ver\":1,\"iss\":\"https:\\\/\\\/connect.xxxxxxx.net\",\"aud\":\"0oa2od8p3c8HZGXEy697\",\"iat\":1679302645,\"exp\":1679306245,\"jti\":\"ID.8m6t4bwqBf55_rFxvvpPHbK0e5wXSb5-7tHQ_8y0Itc\",\"amr\":[\"otp\",\"pwd\",\"user\",\"hwk\",\"mfa\"],\"idp\":\"00ojl2gbgOy2ipuJk696\",\"nonce\":\"5f086f3e3f8eb325c03754344893c5c7\",\"preferred_username\":\"xxxxxxx@xxxxxxx.com\",\"auth_time\":1679302643,\"at_hash\":\"-jyhZtjhAtsURiWgJBYhwQ\"}"}
{"reqId":"zstvYLaZFk7scAe68qSO","level":3,"time":"2023-03-20T08:57:32+00:00","remoteAddr":"9.242.91.75","user":"oidc-user-5fcdef5b96540364f58abce22686fcf7","app":"OpenID","method":"GET","url":"\/apps\/files\/","message":"Calling Application:logout"}
{"reqId":"zstvYLaZFk7scAe68qSO","level":0,"time":"2023-03-20T08:57:32+00:00","remoteAddr":"9.242.91.75","user":"oidc-user-5fcdef5b96540364f58abce22686fcf7","app":"OC\\Authentication\\Token\\DefaultTokenProvider::invalidateToken","method":"GET","url":"\/apps\/files\/","message":"invalidating token ac3aadf0cb36f031a63efd463eb128aa7ddcf01e255868bc976cdcd3b32283ad266f691769532c8fed67c429579b6832e03255ecb280b1c79f412cee0c68f698"}
{"reqId":"zstvYLaZFk7scAe68qSO","level":0,"time":"2023-03-20T08:57:32+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/apps\/files\/","message":"OIDC Logout: revoking tokeneyJraWQiOiJMT2lMWmtIa0FtVkNnUVlsbUdtWWJXODdMMUE5SWF2ZFdsSExtN0ZLeS1BIiwiYWxnIjoiUlMyNTYifQ.eyJ2ZXIiOjEsImp0aSI6IkFULlYyQnBiQlZTekVxRFNVYXdGSGdWODJNTk5sX25KMGhyTXZWa3hXSXVoaE0iLCJpc3MiOiJodHRwczovL2Nvbm5lY3Qua3luZHJ5bC5uZXQiLCJhdWQiOiJodHRwczovL2Nvbm5lY3Qua3luZHJ5bC5uZXQiLCJzdWIiOiJNYXJjaW4uQmljemFuQGt5bmRyeWwuY29tIiwiaWF0IjoxNjc5MzAyNjQ1LCJleHAiOjE2NzkzMDYyNDUsImNpZCI6IjBvYTJvZDhwM2M4SFpHWEV5Njk3IiwidWlkIjoiMDB1MWllNDY3NmJOV001ZHQ2OTciLCJzY3AiOlsib3BlbmlkIiwicHJvZmlsZSIsImVtYWlsIl0sImF1dGhfdGltZSI6MTY3OTMwMjY0M30.Oj8r7WxnuN-jkl-_cGJBRIsgbZejB1wR6YndF6qF6Fbw3Ok972_m8B2kVU4BGjRKS2JOJi6N1S3oaVaMCw6tTLFvhsyflFlRb3KUUTPdHS-gAqGknkqFvNlA0BIW0h3AJl2PVaXwdZYX6tYOsT2LTUmePEloL3w60IJoKXLvgWVobY3sB32Ge1sUiPTupw6ncMaBTjvuHvXZKJ4wxrGv8Ia25icLP4BjZ1vSAweqPEaJPkw1Mv1fUUPoStuM5SbxDC0d4LSIq4_051e1nT3batRTnfnQNB6bvTDgT3bn-Gy1K5oUR11a8T6hVsKp6VMwGX2_G_cJudCjCgs1PLC6vw"}
{"reqId":"zstvYLaZFk7scAe68qSO","level":0,"time":"2023-03-20T08:57:33+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/apps\/files\/","message":"Revocation info: null"}
{"reqId":"zstvYLaZFk7scAe68qSO","level":0,"time":"2023-03-20T08:57:33+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/apps\/files\/","message":"OIDC Logout: ending session eyJraWQiOiJMT2lMWmtIa0FtVkNnUVlsbUdtWWJXODdMMUE5SWF2ZFdsSExtN0ZLeS1BIiwiYWxnIjoiUlMyNTYifQ.eyJ2ZXIiOjEsImp0aSI6IkFULlYyQnBiQlZTekVxRFNVYXdGSGdWODJNTk5sX25KMGhyTXZWa3hXSXVoaE0iLCJpc3MiOiJodHRwczovL2Nvbm5lY3Qua3luZHJ5bC5uZXQiLCJhdWQiOiJodHRwczovL2Nvbm5lY3Qua3luZHJ5bC5uZXQiLCJzdWIiOiJNYXJjaW4uQmljemFuQGt5bmRyeWwuY29tIiwiaWF0IjoxNjc5MzAyNjQ1LCJleHAiOjE2NzkzMDYyNDUsImNpZCI6IjBvYTJvZDhwM2M4SFpHWEV5Njk3IiwidWlkIjoiMDB1MWllNDY3NmJOV001ZHQ2OTciLCJzY3AiOlsib3BlbmlkIiwicHJvZmlsZSIsImVtYWlsIl0sImF1dGhfdGltZSI6MTY3OTMwMjY0M30.Oj8r7WxnuN-jkl-_cGJBRIsgbZejB1wR6YndF6qF6Fbw3Ok972_m8B2kVU4BGjRKS2JOJi6N1S3oaVaMCw6tTLFvhsyflFlRb3KUUTPdHS-gAqGknkqFvNlA0BIW0h3AJl2PVaXwdZYX6tYOsT2LTUmePEloL3w60IJoKXLvgWVobY3sB32Ge1sUiPTupw6ncMaBTjvuHvXZKJ4wxrGv8Ia25icLP4BjZ1vSAweqPEaJPkw1Mv1fUUPoStuM5SbxDC0d4LSIq4_051e1nT3batRTnfnQNB6bvTDgT3bn-Gy1K5oUR11a8T6hVsKp6VMwGX2_G_cJudCjCgs1PLC6vw id: eyJraWQiOiJMM0pFTUJBb3JCMDlqaURJalBxSFpZR0s2WlhGUGVDZlpncVpsVzM3V1U4IiwiYWxnIjoiUlMyNTYifQ.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.kL1mjJpcWBLvbuDd8vBfS2cQZKTREKHn8YkCZF7CrdGLjv6ZCXr3ej7G5n-XtLgeW15vywd79FiEY4NsYJNTVKEioJMgqq8FdUAUT1kiH1xyvP75g8hkinM2UXZYaqt3il5t1Gc-6-mnVv0BOwb9j5zYk64e7k0sJ8ObFHPmujdLlZxE0tVDkfxU4p18a8YsDheGnNtmN8IG7GW-A_kn4ZeeR1rbiR9njvpOV2sS36Aqiv3EYvz9OMvbW5vWLtGNdolue5nkKX1FjtBRFd3qd5iIDrLxgTaNg8QjZTegAw_RjZ57Y_Yp1keSgy-vrMEjGwgfXl2aIPtA42c_5pPA-A"}
{"reqId":"95PxnwPcEwF81s1C01rZ","level":0,"time":"2023-03-20T08:57:34+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OC\\Authentication\\Token\\DefaultTokenProvider::invalidateToken","method":"GET","url":"\/index.php\/apps\/openidconnect\/logout","message":"invalidating token 73eedd852dac820ff6957f6b9cfa63ba8ee41ddc4d0ef9a927c4b7177638d1b58aa435ace929adb4258dae60a3104179e3d0765a1a6a8f31f688245622db1459"}
{"reqId":"95PxnwPcEwF81s1C01rZ","level":2,"time":"2023-03-20T08:57:34+00:00","remoteAddr":"9.242.91.75","user":"--","app":"OpenID","method":"GET","url":"\/index.php\/apps\/openidconnect\/logout","message":"OpenID::logout: missing parameters: iss= and sid= and no active session"}```
DeepDiver1975 commented 1 year ago

Which IdP are you connected to? THX

bibiak1 commented 1 year ago

Okta - https://www.okta.com

bibiak1 commented 1 year ago

problem with code at lines: 181-190 in lib/Client.php file

bibiak1 commented 1 year ago

found that: "Jumbojett\OpenIDConnectClientException accessing : Unable to find a key for (algorithm, kid):RS256, LOiLZkHkAmVCgQYlmGmYbW87L1A9IavdWlHLm7FKy-A)"

DeepDiver1975 commented 1 year ago

Please note that we are not officially supporting okta. Never the less as it was working before it should be possible to make it work again.