Skip to content

OIDC not using userinfo_endpoint from .well_known/openid-configuration #4837

@brunnels

Description

@brunnels

Describe the bug

Weave doesn't seem to be using the userinfo_endpoint from .well_known/openid-configuration.

Mine shows: "userinfo_endpoint": "https://auth.domain.org/api/oidc/userinfo",

In the logs I see:

025-03-17T12:50:10.551Z        ERROR   gitops.auth-server      auth/server.go:496      failed to parse user info       {"error": "missing \"preferred_username\" claim in response"}
2025-03-17T12:50:10.551Z        INFO    gitops  middleware/middleware.go:61     request error   {"uri": "/oauth2/userinfo", "status": 401}

Environment

  • Weave-Gitops Version: 4.0.36
  • Flux Version: 2.5.0
  • Kubernetes version: v1.32.3

This can be worked around with the following in authelia from 4.39.0 and up.
https://www.authelia.com/integration/openid-connect/openid-connect-1.0-claims/#restore-functionality-prior-to-claims-parameter

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions