Authentik API error

[mgrimace]

I'm using the Authentik widget, and it works when I set it up per the wiki for a period of time (not sure exactly), then stops working with an API error. I think it has something to do with the key expiring or changing perhaps, and likely on Authentik's end. Does anyone who use this know how to set up the API key/widget properly? Thankis

[shamoon]

What does the api output look like?

[mgrimace]

Working (when setup):

Not working (about 15-20 mins later):

[shamoon]

Sorry the actual api output which would be in the network tab (of course you can redact anything private)

[mgrimace]

Ha no worries, I'm sorry I'm dense and I'm still not 100% certain by what you mean by api output and where the network tab would be. I clicked the API error and it expanded into:

s@http://[homepageIP]:3000/_next/static/chunks/9244.0f9ec11383159f8f.js:1:1103
LoadableComponent@http://[homepageIP]:3000/_next/static/chunks/4121-c10f39ad3208a3b4.js:1:12202
n@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:11014
G@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:22319
div
li
R@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:25314
ul
I@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:28921
div
O@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:29284
div
div
re@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:43144
n@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:11014
@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:88961
te@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:41198
div
div
div
ie@http://[homepageIP]:3000/_next/static/chunks/pages/index-e9478753f1558dcd.js:1:47092
a@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:15090
s@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:15648
u@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:14523
@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:88961
@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:13804
l@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:1461
n@http://[homepageIP]:3000/_next/static/chunks/pages/_app-8985fbb6b5c333d7.js:1:6032
r@http://[homepageIP]:3000/_next/static/chunks/main-28f0bf55ce641aab.js:1:6947
Y@http://[homepageIP]:3000/_next/static/chunks/main-28f0bf55ce641aab.js:1:9185
ie@http://:3000/_next/static/chunks/main-28f0bf55ce641aab.js:1:11825

In authentik, there's only two possible options when creating the api token:

Doing this, and copying the token works at first, but then it looks like when the token first expires it stops.

In authentik, expanding the token details seems to default to expiring (no obvious options to change that), but the expiration seems to be 'rolling', in the sense that after expiration time passes, it jumps to 20 minutes later.

[mgrimace]

Ok, it does appear that the token is rotating, which would explain why it would work, then stop working. I checked and the original token I entered no longer matches the one that I can copy/enter at a later time (past the original expiration). Zero idea how to resolve this, but at least that's the likely issue

[shamoon]

Ah thanks for the follow-up. Seems like a fair question to ask over there. Maybe you need to uncheck expiring (if that’s a checkbox)?

[mgrimace]

Ah thanks for the follow-up. Seems like a fair question to ask over there. Maybe you need to uncheck expiring (if that’s a checkbox)?

Ok, I figured it out. In Authentik, there's two places to create API tokens:

1. Select the user, then select APIs and Tokens - can create an API token, but cannot change expiration/options (bad)
2. in Admin Panel, Directories, APIs and Tokens - can create an API token, and can deselect 'expiring' (good).

The gethomepage instructions for authentik are accurate, I was erroneously using method (1). That being said, the instructions on the wiki could be updated to included something like "deselect 'expiring' for your token" for more clarity, but this was an error on my part!

[github-actions[bot]]

This discussion has been automatically closed because it was marked as answered.

[github-actions[bot]]

This discussion has been automatically locked since there has not been any recent activity after it was closed. Please open a new discussion for related concerns. See our contributing guidelines for more details.