OAUTH: Unable to resolve Configuration with the provided Issuer of "https://login.microsoftonline.com/REDACTED/v2.0"

[ltomasik]

Issue submitter TODO list

• I've looked up my issue in FAQ
• I've searched for an already existing issues here
• I've tried running master-labeled docker image and the issue still persists there
• I'm running a supported version of the application which is listed here

Describe the bug (actual behavior)

We want to configure Azure AD as oauth2 provider for Kafka-ui. Issuer uri value is loaded from config/environment variable, but isn't accepted by application and throwing following exception.

 exception is java.lang.IllegalArgumentException: Unable to resolve Configuration with the provided Issuer of  │
│ "https://login.microsoftonline.com/REDACTED/v2.0"  

Expected behavior

Application should get all necessary information from issuer-uri endpoint: https://login.microsoftonline.com/REDACTED/v2.0/.well-known/openid-configuration
We also tried to run application with above mentioned issuer-uri endpoint, but got same exception

Your installation details

1. ef0dacb
2. v0.6.1

• name: AUTH_TYPE
  value: "OAUTH2"
• name: SERVER_FORWARDHEADERSSTRATEGY
  value: "native"
• name: AUTH_OAUTH2_CLIENT_AZUREAD_provider
  value: "azuread"
• name: AUTH_OAUTH2_CLIENT_AZUREAD_CLIENTID
  value: REDACTED
• name: AUTH_OAUTH2_CLIENT_AZUREAD_CLIENTSECRET
  value: REDACTED
• name: AUTH_OAUTH2_CLIENT_AZUREAD_SCOPE
  value: "openid"
• name: AUTH_OAUTH2_CLIENT_AZUREAD_ISSUER-URI
  value: "https://login.microsoftonline.com/REDACTED/v2.0"

Steps to reproduce

execute helm install with oauth provider configuration

Screenshots

No response

Logs

Additional context

It seems to work when I remove issuer-uri and add authorization-uri, token-uri, redirect-uri to configuration.

[github-actions[bot]]

Hello there ltomasik! 👋

Thank you and congratulations 🎉 for opening your very first issue in this project! 💖

In case you want to claim this issue, please comment down below! We will try to get back to you as soon as we can. 👀

[ltomasik]

When I add parameters authorization-uri, token-uri, redirect-uri instead of issuer-uri application starts, but throws following error afterwards we tried to login through Azure AD . Probably my redirect-uri isn't correct. Should we define it as FQDN or localhost:8080

• name: AUTH_OAUTH2_CLIENT_AZUREAD_AUTHORIZATION-URI
  value: "https://login.microsoftonline.com/REDACTED/oauth2/v2.0/authorize"
• name: AUTH_OAUTH2_CLIENT_AZUREAD_TOKEN-URI
  value: "https://login.microsoftonline.com/REDACTED/oauth2/v2.0/token"
• name: AUTH_OAUTH2_CLIENT_AZUREAD_REDIRECT-URI
  value: "https://FQDN/login/oauth2/code/azuread"

Error from application:

2023-05-01 10:40:20,647 WARN [reactor-http-epoll-1] r.n.h.c.HttpClientConnect: [766f87f8, L:/REDACTED-IP:58134 - R:login.microsoftonline.com/20.190.159.64:443] The connection observed an error
│ io.netty.handler.ssl.SslHandshakeTimeoutException: handshake timed out after 10000ms

[Haarolean]

That's a warning, not an error. Can't tell what is it about.

[Haarolean]

Hi, that's either a configuration issue or an issue with your provider.
I've heard about multiple cases of using Azure AD as OAuth2 provider.
Please try using the params from this comment. I might also suggest asking around on discord for other configs, if needed.