Header might not be available when refreshing token ?

[vnghia]

Hello I am using this plugin with a setting to send headers to the downstream services. It looks something like this:

Headers:
 - Name: X-Remote-User
   Value: "{{`{{ .claims.preferred_username }}`}}"
 - Name: X-Remote-Name
   Value: "{{`{{ .claims.name }}`}}"
 - Name: X-Remote-Email
   Value: "{{`{{ .claims.email }}`}}"

On the first login, everything seems working. However, when I've tried to login again after the session expires, the service redirected me to the login page again because they didn't recorgnize me again.

And in the log I see something like. Debug log level does not have anything interesting so this is just my wild guess that Kanidm does not return userinfo from the refreshing token endpoint and this plugin has to query that information again.

2026-03-19 13:01:05 [ERROR] [traefik-oidc-auth] renewToken: received bad HTTP response from Provider: {"error":"invalid_grant"}

Could you take a look into this ? Thank you very much for this plugin.