[07:04:39 INFO OidcService]: Built authorization URL via discovery for provider tsidp {"apiVersion":"4.29.2+c39b0b26","logger":"OidcService","context":"OidcService"}
[07:04:39 INFO OidcService]: Authorization parameters: {"redirect_uri":"https://unraid.xxx.ts.net/graphql/api/auth/oidc/callback","scope":"openid profile email","state":"tsidp:bc1d80521bfc123745e5acb35ad74372.1777275939026.07cd4c720601451f09277a0d0b828830a14d12493d7369346938e1d91599ece9","response_type":"code"} {"apiVersion":"4.29.2+c39b0b26","logger":"OidcService","context":"OidcService"}
[07:04:39 INFO OidcRestController]: Redirecting to OIDC provider: https://unraid.xxx.ts.net:1025/authorize?redirect_uri=https%3A%2F%2Funraid.xxx.ts.net%2Fgraphql%2Fapi%2Fauth%2Foidc%2Fcallback&scope=openid+profile+email&state=tsidp%3Abc1d80521bfc123745e5acb35ad74372.1777275939026.07cd4c720601451f09277a0d0b828830a14d12493d7369346938e1d91599ece9&response_type=code&client_id=unraidgui {"apiVersion":"4.29.2+c39b0b26","logger":"OidcRestController","context":"OidcRestController"}
[07:04:39 ERROR OidcTokenExchangeService]: Token exchange failed {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Error type: ClientError {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Error message: unexpected response content-type {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Error code: OAUTH_RESPONSE_IS_NOT_JSON {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Error cause chain: {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: [Cause 1] object: [object Response] {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Token endpoint returned invalid or non-JSON response. {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: This typically means: {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: 1. The token endpoint URL is incorrect (check for typos or wrong paths) {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: 2. The server returned an HTML error page instead of JSON {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: 3. Authentication failed (invalid client_id or client_secret) {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: 4. A proxy/firewall is intercepting the request {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: 5. The OAuth server returned malformed JSON {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Configured token endpoint: https://unraid.xxx.ts.net:1025/token {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcTokenExchangeService]: Please verify your OIDC provider configuration. {"apiVersion":"4.29.2+c39b0b26","logger":"OidcTokenExchangeService","context":"OidcTokenExchangeService"}
[07:04:39 ERROR OidcService]: OAuth callback error: unexpected response content-type {"apiVersion":"4.29.2+c39b0b26","logger":"OidcService","context":"OidcService"}
[07:04:39 ERROR OidcRestController]: OIDC callback error: UnauthorizedException: Authentication failed {"apiVersion":"4.29.2+c39b0b26","logger":"OidcRestController","context":"OidcRestController"}Tailscale ACL below: {
"src": ["tag:grp-admin", "tag:role-relay"],
"dst": ["*"],
"ip": ["*"],
"app": {
"tailscale.com/cap/tsidp": [
{
"allow_admin_ui": true,
"allow_dcr": true,
"resources": ["*"],
"users": ["*"],
},
],
},
}