Skip to content

OIDC is crashing docker container #489

@targetingsnake

Description

@targetingsnake

Hallo,

i'm currently running into an Issue where the oidc crashes the docker container when the connection is refused. Connection itself for login is working. After a couple of minutes when nothing is happening the application crashes:

application-1  | Running migrations for accent…
application-1  | 20:32:57.312 [info] Migrations already up
application-1  | Running seed script for accent…
application-1  | 20:33:00.708 [info] Loading 129 CA(s) from :otp store
application-1  | 20:33:01.275 [info] Running Accent.Endpoint with Bandit 1.8.0 at 0.0.0.0:80 (http)
application-1  | 20:33:01.275 [info] Access Accent.Endpoint at https://$accent_domain.domain.tld
application-1  | 20:33:01.278 [info] LanguageTool was not configured. Use LANGUAGE_TOOL_LANGUAGES environment variable to set a list of comma-separated languages short code.
application-1  | 20:34:07.460 request_id=GIl4445Y2dZleXMAABrj [info] GET /app/projects/1d241d08-e014-4027-b066-118961e09cd8/collaborators
application-1  | 20:34:07.462 request_id=GIl4445Y2dZleXMAABrj [info] Sent 200 in 1ms
application-1  | 20:34:07.700 request_id=GIl445ygnp-eSVMAABsD [info] POST /graphql
application-1  | 20:34:07.703 request_id=GIl445zOiT5I_vEAABtj [info] POST /graphql
application-1  | 20:34:07.729 request_id=GIl445zOiT5I_vEAABtj current_user=$user_mail graphql_operation=ProjectCollaborators [info] Sent 200 in 25ms
application-1  | 20:34:07.735 request_id=GIl445ygnp-eSVMAABsD current_user=$user_mail graphql_operation=Project [info] Sent 200 in 34ms
application-1  | 21:04:54.863 request_id=GIl6kbAiU2tkm1AAAAFh [info] GET /app/projects/1d241d08-e014-4027-b066-118961e09cd8/collaborators
application-1  | 21:04:54.864 request_id=GIl6kbAiU2tkm1AAAAFh [info] Sent 200 in 686µs
application-1  | 21:04:55.196 request_id=GIl6kcP10msbySMAAAGB [info] POST /graphql
application-1  | 21:04:55.201 request_id=GIl6kcREOFpxeSgAAAPC [info] POST /graphql
application-1  | 21:04:55.216 request_id=GIl6kcREOFpxeSgAAAPC current_user=$user_mail graphql_operation=ProjectCollaborators [info] Sent 200 in 14ms
application-1  | 21:04:55.216 request_id=GIl6kcP10msbySMAAAGB current_user=$user_mail graphql_operation=Project [info] Sent 200 in 20ms
application-1  | 21:20:48.657 request_id=GIl7b8KuGIizbq0AAATC [info] GET /app/projects/1d241d08-e014-4027-b066-118961e09cd8/collaborators
application-1  | 21:20:48.658 request_id=GIl7b8KuGIizbq0AAATC [info] Sent 200 in 604µs
application-1  | 21:20:48.992 request_id=GIl7b9ajmvhHyasAAATi [info] POST /graphql
application-1  | 21:20:48.996 request_id=GIl7b9biWYZ3E74AAAUC [info] POST /graphql
application-1  | 21:20:49.013 request_id=GIl7b9biWYZ3E74AAAUC current_user=$user_mail graphql_operation=ProjectCollaborators [info] Sent 200 in 16ms
application-1  | 21:20:49.013 request_id=GIl7b9ajmvhHyasAAATi current_user=$user_mail graphql_operation=Project [info] Sent 200 in 21ms
application-1  | 21:33:01.293 [error] GenServer :openid_connect terminating
application-1  | ** (MatchError) no match of right hand side value: {:error, :update_documents, %HTTPoison.Error{reason: :econnrefused, id: nil}}
application-1  |     (openid_connect 0.2.2) lib/openid_connect/worker.ex:55: OpenIDConnect.Worker.update_documents/2
application-1  |     (openid_connect 0.2.2) lib/openid_connect/worker.ex:47: OpenIDConnect.Worker.handle_info/2
application-1  |     (stdlib 6.2.2) gen_server.erl:2345: :gen_server.try_handle_info/3
application-1  |     (stdlib 6.2.2) gen_server.erl:2433: :gen_server.handle_msg/6
application-1  |     (stdlib 6.2.2) proc_lib.erl:329: :proc_lib.init_p_do_apply/3
application-1  | Last message: {:update_documents, :default_oidc}
application-1  | State: %{default_oidc: %{config: 

Docker-Config looks like this:

version: '3.7'
services:
  application:
    image: $private_registry/accent:latest
    ports:
      - 8090:80
    environment:
      - PORT=80
      - DATABASE_URL=postgres://$DB_USER:$DB_PW@$DB_HOST:5432/$DB_NAME
      - SECRET_KEY_BASE=$SECRET_KEY
      - CANONICAL_URL=https://$accent_domain.domain.tld
      - OIDC_CLIENT_ID=$OIDC_CLIENT_ID
      - OIDC_CLIENT_SECRET=$OIDC_SECRET
      - OIDC_DISCOVERY_URI=https://$keypass.$domain.tld/realms/$org/.well-known/openid-configuration

All $ Variables are strings in the original docker-file. The private registry clones the image from the mirego/accent repo on docker hub.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions