Self Hosted GitHub App Failure

[chaseconey]

Overview

Hey there 👋 .

I have been trying to get the self-hosted setup working for a couple of days and think I have it mostly figured out now. The last major hurdle that I can't quite figure out is when I am installing the GitHub application (as defined here) I am getting a 400 error every time.

Error Message and Context

As I click the install button on our organization, I am redirected through the OAuth flow and end up back at my application with a code and state var in the URL, but the app has returned a 400.

The API has an error message that isn't super helpful in diagnosing, but here it is anyway:

{
  "message": "Error with authentication please try again",
  "asctime": "2023-10-26 23:23:38,437",
  "name": "django.security.SuspiciousOperation",
  "levelname": "ERROR",
  "lineno": 124,
  "pathname": "/usr/local/lib/python3.9/site-packages/django/core/handlers/exception.py",
  "funcName": "response_for_exception",
  "threadName": "MainThread",
  "exc_info": "Traceback (most recent call last):\n  File \"/usr/local/lib/python3.9/site-packages/django/core/handlers/exception.py\", line 55, in inner\n    response = get_response(request)\n  File \"/usr/local/lib/python3.9/site-packages/django/core/handlers/base.py\", line 197, in _get_response\n    response = wrapped_callback(request, *callback_args, **callback_kwargs)\n  File \"/usr/local/lib/python3.9/site-packages/django/views/generic/base.py\", line 104, in view\n    return self.dispatch(request, *args, **kwargs)\n  File \"/usr/local/lib/python3.9/site-packages/django/views/generic/base.py\", line 143, in dispatch\n    return handler(request, *args, **kwargs)\n  File \"/app/codecov_auth/views/github.py\", line 118, in get\n    return self.actual_login_step(request)\n  File \"/app/codecov_auth/views/github.py\", line 98, in actual_login_step\n    redirection_url = self.get_redirection_url_from_state(state)\n  File \"/app/codecov_auth/views/base.py\", line 108, in get_redirection_url_from_state\n    raise SuspiciousOperation(\"Error with authentication please try again\")\ndjango.core.exceptions.SuspiciousOperation: Error with authentication please try again",
  "status_code": 400,
  "request": "<WSGIRequest: GET '/login/github?code=dc20e59f06a1a1b5b4ae&installation_id=43344926&setup_action=install'>",
  "logger.name": "django.security.SuspiciousOperation",
  "logger.thread_name": "MainThread",
  "level": "ERROR"
}

Any ideas what could be causing this to happen?

[trent-codecov]

Thank you for reporting. We are going to get this figured out. codecov/engineering-team#806