Local test setup with docker compose? #3702

tamis-laan · 2024-08-18T15:50:04Z

tamis-laan
Aug 18, 2024

I'm trying to use dex locally with docker compose for development purposes. And I'm facing the issue where we have an internal docker network and the host network where the gui is forwarded to localhost:3000 and dex to localhost:5556.

docker-compose.yaml

configs:
  dex_config:
    file: ./dex_config.yaml

services:
  dex:
    image: dexidp/dex:v2.41.1-alpine
    ports:
      - "5556:5556"
    configs:
      - source: dex_config
        target: /dex-config/config.yaml
    volumes:
      - ./data/dex:/dex-data
    command: ["dex", "serve", "/dex-config/config.yaml"]
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:5556/dex/healthz"]
      interval: 2s
      timeout: 2s
      retries: 5
      start_period: 0s


  interface:
    container_name: interface
    image: interface:latest
    build:
      context: .
      dockerfile: docker/interface/Dockerfile
    volumes:
      - ./cmd:/app/cmd
      - ./internal:/app/internal
      - ./static:/app/static
      - ./templates:/app/templates
    ports:
      - 3000:8080 # ui
    environment:
      - LOGLEVEL=DEBUG
    restart: always
    depends_on:
      dex:
        condition: service_healthy

dex_config.yaml

issuer: http://localhost:5556/dex
storage:
  type: postgres
  config:
    ....
    
web:
  http: 0.0.0.0:5556

telemetry:
  http: 0.0.0.0:5558

logger:
  level: "debug"
  format: "text" # can also be "json"

staticClients:
- id: interface
  redirectURIs:
  - 'http://interface:3000/auth'
  - 'http://localhost:3000/auth'
  name: 'Ticket Bots'
  secret: ZXhhbXBsZS1hcHAtc2VjcmV0

enablePasswordDB: true

staticPasswords:
- email: "admin@example.com"
  # bcrypt hash of the string "password": $(echo password | htpasswd -BinC 10 admin | cut -d: -f2)
  hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
  username: "admin"
  userID: "08a8684b-db88-4b73-90a9-3cd1661f5466"

interface.py

import os
from fastapi import FastAPI, Request, Depends, HTTPException
from fastapi.responses import RedirectResponse
from fastapi.staticfiles import StaticFiles
from fastapi.security import OAuth2AuthorizationCodeBearer
from authlib.integrations.starlette_client import OAuth
from authlib.jose import jwt
from starlette.middleware.sessions import SessionMiddleware

import uvicorn

import internal.util as util

# Configure logging
util.configLogging()

# Create app router
app = FastAPI()

# Create oauth2 object
oauth = OAuth()

# Register a new client application
oauth.register(
    name='dex',
    client_id='interface',
    client_secret='ZXhhbXBsZS1hcHAtc2VjcmV0',
    server_metadata_url='http://dex:5556/dex/.well-known/openid-configuration',
    client_kwargs={'scope': 'openid profile email'},
)

# OAuth2 token URL
oauth2_scheme = OAuth2AuthorizationCodeBearer(
    authorizationUrl='http://dex:5556/dex/auth',
    tokenUrl='http://dex:5556/dex/token'
)

# Get the JWT secret key
JWT_SECRET_KEY = os.getenv('JWT_SECRET_KEY', 'your_jwt_secret_key')

# Add SessionMiddleware to the app
app.add_middleware(SessionMiddleware, secret_key=JWT_SECRET_KEY)

@app.get("/test")
async def test(request: Request):
    user = request.session.get("user")
    if not user:
        return RedirectResponse(url="/login")
    return "Hello world"

@app.get("/login")
async def login(request: Request):
    redirect_uri = 'http://localhost:3000/auth'  # Browser-facing URL
    return await oauth.dex.authorize_redirect(request, redirect_uri)

@app.route('/auth')
async def auth(request: Request):
    try:
        token = await oauth.dex.authorize_access_token(request)
        print(f"Token received: {token}")
        user = await oauth.dex.parse_id_token(request, token)
        request.session["user"] = dict(user)
        return RedirectResponse(url="/")
    except Exception as e:
        print(f"Error during token exchange: {str(e)}")
        raise HTTPException(status_code=500, detail="Token exchange failed")

@app.get("/logout")
async def logout(request: Request):
    request.session.pop("user", None)
    return RedirectResponse(url="/")

# Dependency to protect routes
async def get_current_user(token: str = Depends(oauth2_scheme)):
    try:
        claims = jwt.decode(token, JWT_SECRET_KEY)
        return claims
    except jwt.JWTError:
        raise HTTPException(status_code=401, detail="Invalid token")

# Start web server
if __name__ == '__main__':
    uvicorn.run(app, host="0.0.0.0", port=8080, log_config=None)

When going to http://localhost:3000/test I'm redirected to http://localhost:5556/dex/auth/local/login?back=&state=lvnecuvzd2s4d6z6rvaeqfo3s.

After logging in I'm redirected to http://localhost:5556/dex/approval?req=lvnecuvzd2s4d6z6rvaeqfo3s&hmac=ij2LH4PWcqCS-mxYqF21CphFaEx4etijDOZFYFhwprQ.

After granting permissions I'm redirected to:
http://localhost:3000/auth?code=vce5wr6pa6tz2sepvuoibe7c7&state=53XNRKrX9SJ5BiGwniQbwpGxNDsAJl which returns a internal server error.

Here are the server logs:

interface  | + entr -rn /bin/sh -c python cmd/interface/main.py
dex-1      | time=2024-08-18T15:48:25.888Z level=INFO msg="Version info" dex_version=v2.41.1 go.version=go1.22.5 go.os=linux go.arch=amd64
dex-1      | time=2024-08-18T15:48:25.888Z level=INFO msg="config using log level" level=DEBUG
dex-1      | time=2024-08-18T15:48:25.888Z level=INFO msg="config issuer" issuer=http://localhost:5556/dex
dex-1      | time=2024-08-18T15:48:28.823Z level=INFO msg="config storage" storage_type=postgres
dex-1      | time=2024-08-18T15:48:28.823Z level=INFO msg="config static client" client_name="Ticket Bots"
dex-1      | time=2024-08-18T15:48:28.823Z level=INFO msg="config connector: local passwords enabled"
dex-1      | time=2024-08-18T15:48:28.823Z level=INFO msg="config refresh tokens rotation" enabled=true
dex-1      | time=2024-08-18T15:48:28.856Z level=INFO msg="keys expired, rotating"
dex-1      | time=2024-08-18T15:48:28.967Z level=INFO msg="keys rotated" next_rotation=2024-08-18T21:48:28.954Z
dex-1      | time=2024-08-18T15:48:28.968Z level=INFO msg="listening on" server=telemetry address=0.0.0.0:5558
dex-1      | time=2024-08-18T15:48:28.968Z level=INFO msg="listening on" server=http address=0.0.0.0:5556
interface  | INFO:uvicorn.error:Started server process [10]
interface  | INFO:uvicorn.error:Waiting for application startup.
interface  | INFO:uvicorn.error:Application startup complete.
interface  | INFO:uvicorn.error:Uvicorn running on http://0.0.0.0:8080 (Press CTRL+C to quit)
 interface  | INFO:uvicorn.access:192.168.176.1:33882 - "GET /test HTTP/1.1" 307
interface  | DEBUG:httpx:load_ssl_context verify=True cert=None trust_env=True http2=False
interface  | DEBUG:httpx:load_verify_locations cafile='/usr/local/lib/python3.12/site-packages/certifi/cacert.pem'
interface  | DEBUG:httpcore.connection:connect_tcp.started host='dex' port=5556 local_address=None timeout=5.0 socket_options=None
interface  | DEBUG:httpcore.connection:connect_tcp.complete return_value=<httpcore._backends.anyio.AnyIOStream object at 0x7b5b96df8d70>
interface  | DEBUG:httpcore.http11:send_request_headers.started request=<Request [b'GET']>
interface  | DEBUG:httpcore.http11:send_request_headers.complete
interface  | DEBUG:httpcore.http11:send_request_body.started request=<Request [b'GET']>
interface  | DEBUG:httpcore.http11:send_request_body.complete
interface  | DEBUG:httpcore.http11:receive_response_headers.started request=<Request [b'GET']>
interface  | DEBUG:httpcore.http11:receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Length', b'1227'), (b'Content-Type', b'application/json'), (b'Date', b'Sun, 18 Aug 2024 15:48:36 GMT')])
interface  | INFO:httpx:HTTP Request: GET http://dex:5556/dex/.well-known/openid-configuration "HTTP/1.1 200 OK"
interface  | DEBUG:httpcore.http11:receive_response_body.started request=<Request [b'GET']>
interface  | DEBUG:httpcore.http11:receive_response_body.complete
interface  | DEBUG:httpcore.http11:response_closed.started
interface  | DEBUG:httpcore.http11:response_closed.complete
interface  | DEBUG:httpcore.connection:close.started
interface  | DEBUG:httpcore.connection:close.complete
interface  | DEBUG:httpx:load_ssl_context verify=True cert=None trust_env=True http2=False
interface  | DEBUG:httpx:load_verify_locations cafile='/usr/local/lib/python3.12/site-packages/certifi/cacert.pem'
interface  | INFO:uvicorn.access:192.168.176.1:33882 - "GET /login HTTP/1.1" 302
dex-1      | time=2024-08-18T15:48:37.906Z level=INFO msg="login successful" connector_id=local username=admin preferred_username="" email=admin@example.com groups=[] request_id=10189c17-b3d0-4016-b4ab-8879b8994a4e
interface  | DEBUG:httpx:load_ssl_context verify=True cert=None trust_env=True http2=False
interface  | DEBUG:httpx:load_verify_locations cafile='/usr/local/lib/python3.12/site-packages/certifi/cacert.pem'
interface  | DEBUG:httpcore.connection:connect_tcp.started host='localhost' port=5556 local_address=None timeout=5.0 socket_options=None
interface  | DEBUG:httpcore.connection:connect_tcp.failed exception=ConnectError(OSError('All connection attempts failed'))
interface  | INFO:uvicorn.access:192.168.176.1:33882 - "GET /auth?code=kdcec2xo6d3wipfgo7hgpsle3&state=psFMYLQeeVqguPocvxHhAcwXglgkS1 HTTP/1.1" 500
interface  | ERROR:uvicorn.error:Exception in ASGI application
interface  | Traceback (most recent call last):
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_transports/default.py", line 69, in map_httpcore_exceptions
interface  |     yield
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_transports/default.py", line 373, in handle_async_request
interface  |     resp = await self._pool.handle_async_request(req)
interface  |            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_async/connection_pool.py", line 216, in handle_async_request
interface  |     raise exc from None
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_async/connection_pool.py", line 196, in handle_async_request
interface  |     response = await connection.handle_async_request(
interface  |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_async/connection.py", line 99, in handle_async_request
interface  |     raise exc
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_async/connection.py", line 76, in handle_async_request
interface  |     stream = await self._connect(request)
interface  |              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_async/connection.py", line 122, in _connect
interface  |     stream = await self._network_backend.connect_tcp(**kwargs)
interface  |              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_backends/auto.py", line 30, in connect_tcp
interface  |     return await self._backend.connect_tcp(
interface  |            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_backends/anyio.py", line 114, in connect_tcp
interface  |     with map_exceptions(exc_map):
interface  |   File "/usr/local/lib/python3.12/contextlib.py", line 158, in __exit__
interface  |     self.gen.throw(value)
interface  |   File "/usr/local/lib/python3.12/site-packages/httpcore/_exceptions.py", line 14, in map_exceptions
interface  |     raise to_exc(exc) from exc
interface  | httpcore.ConnectError: All connection attempts failed
interface  |
interface  | The above exception was the direct cause of the following exception:
interface  |
interface  | Traceback (most recent call last):
interface  |   File "/usr/local/lib/python3.12/site-packages/uvicorn/protocols/http/httptools_impl.py", line 401, in run_asgi
interface  |     result = await app(  # type: ignore[func-returns-value]
interface  |              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/uvicorn/middleware/proxy_headers.py", line 70, in __call__
interface  |     return await self.app(scope, receive, send)
interface  |            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/fastapi/applications.py", line 1054, in __call__
interface  |     await super().__call__(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/applications.py", line 123, in __call__
interface  |     await self.middleware_stack(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/middleware/errors.py", line 186, in __call__
interface  |     raise exc
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/middleware/errors.py", line 164, in __call__
interface  |     await self.app(scope, receive, _send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/middleware/sessions.py", line 85, in __call__
interface  |     await self.app(scope, receive, send_wrapper)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/middleware/exceptions.py", line 65, in __call__
interface  |     await wrap_app_handling_exceptions(self.app, conn)(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/_exception_handler.py", line 64, in wrapped_app
interface  |     raise exc
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/_exception_handler.py", line 53, in wrapped_app
interface  |     await app(scope, receive, sender)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/routing.py", line 756, in __call__
interface  |     await self.middleware_stack(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/routing.py", line 776, in app
interface  |     await route.handle(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/routing.py", line 297, in handle
interface  |     await self.app(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/routing.py", line 77, in app
interface  |     await wrap_app_handling_exceptions(app, request)(scope, receive, send)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/_exception_handler.py", line 64, in wrapped_app
interface  |     raise exc
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/_exception_handler.py", line 53, in wrapped_app
interface  |     await app(scope, receive, sender)
interface  |   File "/usr/local/lib/python3.12/site-packages/starlette/routing.py", line 72, in app
interface  |     response = await func(request)
interface  |                ^^^^^^^^^^^^^^^^^^^
interface  |   File "/app/cmd/interface/main.py", line 75, in auth
interface  |     token = await oauth.dex.authorize_access_token(request)
interface  |             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/authlib/integrations/starlette_client/apps.py", line 81, in authorize_access_token
interface  |     token = await self.fetch_access_token(**params, **kwargs)
interface  |             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/authlib/integrations/base_client/async_app.py", line 125, in fetch_access_token
interface  |     token = await client.fetch_token(token_endpoint, **params)
interface  |             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/authlib/integrations/httpx_client/oauth2_client.py", line 125, in _fetch_token
interface  |     resp = await self.post(
interface  |            ^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_client.py", line 1892, in post
interface  |     return await self.request(
interface  |            ^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/authlib/integrations/httpx_client/oauth2_client.py", line 90, in request
interface  |     return await super().request(
interface  |            ^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_client.py", line 1574, in request
interface  |     return await self.send(request, auth=auth, follow_redirects=follow_redirects)
interface  |            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_client.py", line 1661, in send
interface  |     response = await self._send_handling_auth(
interface  |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_client.py", line 1689, in _send_handling_auth
interface  |     response = await self._send_handling_redirects(
interface  |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_client.py", line 1726, in _send_handling_redirects
interface  |     response = await self._send_single_request(request)
interface  |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_client.py", line 1763, in _send_single_request
interface  |     response = await transport.handle_async_request(request)
interface  |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_transports/default.py", line 372, in handle_async_request
interface  |     with map_httpcore_exceptions():
interface  |   File "/usr/local/lib/python3.12/contextlib.py", line 158, in __exit__
interface  |     self.gen.throw(value)
interface  |   File "/usr/local/lib/python3.12/site-packages/httpx/_transports/default.py", line 86, in map_httpcore_exceptions
interface  |     raise mapped_exc(message) from exc
interface  | httpx.ConnectError: All connection attempts failed

How do I get this working locally for development purposes?

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Local test setup with docker compose? #3702

{{title}}

Replies: 0 comments

Select a reply

Local test setup with docker compose? #3702

tamis-laan Aug 18, 2024

Replies: 0 comments

tamis-laan
Aug 18, 2024