Keycloak Error "invalid_token"

[1itt1eB0y]

Problem

Click OpenID Login and login successfully in Keycloak, it will be redirected to /?notice=authentication-required.
And Keycloak log

2022-04-17 15:17:45,321 WARN  [org.keycloak.events] (executor-thread-13) type=USER_INFO_REQUEST_ERROR, realmId=outline, clientId=null, userId=null, ipAddress=172.20.0.1, error=invalid_token, auth_method=validate_access_token
2022-04-17 15:23:31,981 WARN  [org.keycloak.events] (executor-thread-13) type=USER_INFO_REQUEST_ERROR, realmId=master, clientId=null, userId=null, ipAddress=172.20.0.1, error=invalid_token, auth_method=validate_access_token
2022-04-17 15:17:39,502 WARN  [org.keycloak.events] (executor-thread-13) type=USER_INFO_REQUEST_ERROR, realmId=outline, clientId=null, userId=null, ipAddress=172.20.0.1, error=invalid_token, auth_method=validate_access_token
2022-04-17 15:21:00,404 WARN  [org.keycloak.events] (executor-thread-13) type=USER_INFO_REQUEST_ERROR, realmId=master, clientId=null, userId=null, ipAddress=172.20.0.1, error=invalid_token, auth_method=validate_access_token
2022-04-17 15:23:29,606 WARN  [org.keycloak.events] (executor-thread-13) type=USER_INFO_REQUEST_ERROR, realmId=master, clientId=null, userId=null, ipAddress=172.20.0.1, error=invalid_token, auth_method=validate_access_token

With extra curl test myself

So it should be the token which Outline sent to Keycloak is invalid.

Outline Version

• Install: self hosted
• Version: docker image outlinewiki/outline:0.63.0

[tommoor]

You should post the relevant OIDC_ env variables for folks to help

[1itt1eB0y]

OIDC_env is here

OIDC_CLIENT_ID=outline
OIDC_CLIENT_SECRET=*******
OIDC_AUTH_URI=http://10.8.0.5:8080/realms/outline/protocol/openid-connect/auth
OIDC_TOKEN_URI=http://10.8.0.5:8080/realms/outline/protocol/openid-connect/token
OIDC_USERINFO_URI=http://10.8.0.5:8080/realms/master/protocol/openid-connect/userinfo
OIDC_USERNAME_CLAIM=preferred_username
OIDC_DISPLAY_NAME=OpenID
OIDC_SCOPES=openid profile email

[1itt1eB0y]

There is a mistake setting for OIDC_USERINFO_URI. Solved