Infinite loop for keycloak?

[CJCShadowsan]

I raised it in the onyxia repo - But it seems i've got an infinite login loop whilst using keycloak.

I create the realm, I create the client, that all works as in I get redirected to the auth landing page, I log my details, it passes me back...

...But then it still says "login" at the top right, and if I click the catalog or my services, I get an infinite loop where it continually tries to loop over.

Any thoughts?

[garronej]

Hi @CJCShadowsan,
Thank you for reaching out!

How did you find Onyxia?
What instruction did you follow to install it?
https://docs.onyxia.sh/installing

Best regards,

[CJCShadowsan]

Currently building out a stack, was looking at this because it's open 🙂 Was literally going through the step-by-step instructions to install via kubernetes on the old documentation, then have just gone through the docs listed. Both times I get to the point where I auth, I check keycloak and it recognises me as a user session... …Then I get redirected back to onyxia and it still thinks I have to login at the top right and if I click services catalog or my services, I get an infinite loop of retries. Any ideas would be appreciated here - I’m clearly close!

…

On Tue, 11 Oct 2022, 01:42 Joseph Garrone, ***@***.***> wrote: Hi @CJCShadowsan, Thank you for reaching out! How did you find Onyxia? What instruction did you follow to install it? https://docs.onyxia.sh/installing Best regards, — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: ***@***.***>

[olevitt]

Hi,
No idea on top of my head but you are welcome to join the slack dedicated to onyxia : https://join.slack.com/t/3innovation/shared_invite/zt-19tht9hvr-bZGMdW8AV_wvd5kz3wRSMw
I suggest we setup a visio there to live debug. If you are ok with that it would be easier to pin down the issue you are facing

[garronej]

Currently building out a stack, was looking at this because it's open 🙂

Nice :) You did well :)

Both times I get to the point where I auth, I check keycloak and it recognises me as a user session...

Is that so? 😣
Would you copy paste your onyxia-values.yaml and keycloak-values.yaml here?
I'll see if I can spot anything obvious.
If not and in any case, you are very welcome to schedule a call with my college @olevitt.

Best regards,

[CJCShadowsan]

For reference so I can mark this as an answer...:

Caused by:

Confidential setting not being correct. The moment I changed to public (thanks @olevitt for the call!), this stopped infinite looping.

Oddly enough keycloak recognised that it was an active session, onyxia just continually kept saying "this is a confidential token, not what i'm expecting" so kept redirecting to keycloak, which kept saying "You're logged in already, here's your token"... Ad infinitum 🤣

In other news... Firefox's "slow everything down to a crawl via throttling for GPRS" is very useful!

(and in future i'll be implementing opentelemetry with on UbiQ so i'll be able to capture this stuff in-flight with tracing)