Invalid CSRF token error during authentication: OAuth2 Proxy update needed #21861
Labels
area/che-operator
Issues and PRs related to Eclipse Che Kubernetes Operator
kind/bug
Outline of a bug - must adhere to the bug report template.
severity/P1
Has a major impact to usage or development of the system.
Milestone
Describe the bug
Che operator depends on deprecated version of oauth2-proxy which causes SSO issues with csrf token.
Here is a well known third-party bug coming from oauth2-proxy 7.2.0 (currently used by che-operator):
oauth2-proxy/oauth2-proxy#817
The fix is merged and included in version 7.4.0:
oauth2-proxy/oauth2-proxy#1708
Could you please upgrade the oauth2-proxy dependency version?
Original issue:
Expected result: the login process is successful
Actual result: unhandled error is returned: Login Failed: Unable to find a valid CSRF token. Please try again
Che version
7.57@latest
Steps to reproduce
Expected result: the login process is successful
Actual result: unhandled error is returned: Login Failed: Unable to find a valid CSRF token. Please try again
Expected behavior
Login success
Runtime
other (please specify in additional context)
Screenshots
No response
Installation method
chectl/latest
Environment
Linux
Eclipse Che Logs
No response
Additional context
microk8s
The text was updated successfully, but these errors were encountered: