Docker-compose not fully working?

[jhermsen]

I'm trying to run the docker compose in docker desktop, but it doesn't seem to work.
OpenId initially exits so I have to start it manually.
After that opening :4200 I see multiple issues with crossorigin, started browser ignoring web security to skip this.

Now I have issues with admin interface accessing openid server, also trying to connect to :60000 directly doesn't work with any page including the metadata url's.
I added certificates to trusted accounts so cert issue for connection is not the case.

Any advice on how to troubleshoot/fix this?

[simpleidserver]

By default, the docker-compose file is building the docker ìmage and the CSPROJ must be published by executing this command line : psake publishDocker.
You can download the file https://github.com/simpleidserver/SimpleIdServer/blob/master/conf/docker/2.0.18/docker-compose.yml and run the command line docker-compose up on your local machine.

Kind Regards,

SID

[jhermsen]

I have tried it and have some trouble using the "psake publishdocker" script.

• 1st issue missing npm packages, figured out to do npm install in website project
• 2nd issue docker-compose push, fails access denied to resource. Didn't get it solved yet.

Then I just tried the compose file and use the hub repo images, but then I get an error on the db image that there is a script issue. I'll send the exact message tonight.

I'm not to familiar with docker yet sorry.

[simpleidserver]

Before executing the docker-compose up command please :

• Stop all the SimpleIdServer Docker containers.
• Purge all the unused cache, images and containers by executing this command : docker system prune --volumes.
• Create an empty directory
• Download the file https://github.com/simpleidserver/SimpleIdServer/blob/master/conf/docker/2.0.18/docker-compose.yml and move it into the new directory.
• Execute the command line docker-compose up in the new directory.

[jhermsen]

Just noticed I forgot to remove images as well. Removed images and everything and tried again now all startup, but it is still not working.

OpenId container after restarting it shows following logs:

warn: Microsoft.AspNetCore.DataProtection.Repositories.FileSystemXmlRepository[60]
      Storing keys in a directory '/App' that may not be persisted outside of the container. Protected data will be unavailable when container is destroyed.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'Content.JsonWebKey' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'Claims.OAuthConsent' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'AuthenticationMethodReferences.AuthenticationContextClassReference' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'Scopes.BCAuthorize' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'Contacts.OpenIdClient' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'DefaultAcrValues.OpenIdClient' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'GrantTypes.OpenIdClient' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'PostLogoutRedirectUris.OpenIdClient' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'RedirectionUrls.OpenIdClient' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
warn: Microsoft.EntityFrameworkCore.Model.Validation[10620]
      The property 'ResponseTypes.OpenIdClient' is a collection or enumeration type with a value converter but with no value comparer. Set a value comparer to ensure the collection/enumeration elements are compared correctly.
info: Microsoft.EntityFrameworkCore.Infrastructure[10403]
      Entity Framework Core 5.0.4 initialized 'OpenIdDBContext' using provider 'Microsoft.EntityFrameworkCore.SqlServer' with options: MigrationsAssembly=SimpleIdServer.OpenID.SqlServer.Startup 
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (29ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (21ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT OBJECT_ID(N'[__EFMigrationsHistory]');
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT OBJECT_ID(N'[__EFMigrationsHistory]');
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [MigrationId], [ProductVersion]
      FROM [__EFMigrationsHistory]
      ORDER BY [MigrationId];
info: Microsoft.EntityFrameworkCore.Migrations[20405]
      No migrations were applied. The database is already up to date.
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (4ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT CASE
          WHEN EXISTS (
              SELECT 1
              FROM [OAuthScopes] AS [o]) THEN CAST(1 AS bit)
          ELSE CAST(0 AS bit)
      END
info: Microsoft.EntityFrameworkCore.Infrastructure[10403]
      Entity Framework Core 5.0.4 initialized 'OpenIdDBContext' using provider 'Microsoft.EntityFrameworkCore.SqlServer' with options: MigrationsAssembly=SimpleIdServer.OpenID.SqlServer.Startup 
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (71ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT CASE
          WHEN EXISTS (
              SELECT 1
              FROM [User] AS [u]
              WHERE [u].[Discriminator] = N'OAuthUser') THEN CAST(1 AS bit)
          ELSE CAST(0 AS bit)
      END
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (3ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT CASE
          WHEN EXISTS (
              SELECT 1
              FROM [Acrs] AS [a]) THEN CAST(1 AS bit)
          ELSE CAST(0 AS bit)
      END
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (3ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT CASE
          WHEN EXISTS (
              SELECT 1
              FROM [OpenIdClients] AS [o]) THEN CAST(1 AS bit)
          ELSE CAST(0 AS bit)
      END
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (6ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT CASE
          WHEN EXISTS (
              SELECT 1
              FROM [AuthenticationSchemeProviders] AS [a]) THEN CAST(1 AS bit)
          ELSE CAST(0 AS bit)
      END
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (45ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (1ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL
info: Microsoft.Hosting.Lifetime[0]
      Now listening on: https://[::]:60000
info: Microsoft.Hosting.Lifetime[0]
      Application started. Press Ctrl+C to shut down.
info: Microsoft.Hosting.Lifetime[0]
      Hosting environment: Docker
info: Microsoft.Hosting.Lifetime[0]
      Content root path: /App
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (1ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (6ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (14ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (4ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (4ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (3ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (3ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (3ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL

Also opening url: https://localhost:60000/.well-known/openid-configuration gets me a connection closed error in the browser.
Nothing shows up in the logs.

[simpleidserver]

The OPENID server is using a self-signed certificate therefore, the following root certificate must be installed into the "Trusted Root Certificate Authority".
https://github.com/simpleidserver/SimpleIdServer/blob/master/certificates/localhost.pfx

Can-you please check if your OPENID container has this port mapping rule : 60000:60000

[jhermsen]

I can see :60000 as mapped in the docker inspect and docker container ls output.

Trusted CA certificate has been imported.

The OpenID container seems stuck in some loop the last 2 messages keep repeating:

info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (3ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE [b].[Status] = 1
info: Microsoft.EntityFrameworkCore.Database.Command[20101]
      Executed DbCommand (2ms) [Parameters=[], CommandType='Text', CommandTimeout='30']
      SELECT [b].[Id], [b].[ClientId], [b].[ExpirationDateTime], [b].[Interval], [b].[NextFetchTime], [b].[NotificationEdp], [b].[NotificationMode], [b].[NotificationToken], [b].[RejectionSentDateTime], [b].[Scopes], [b].[Status], [b].[UpdateDateTime], [b].[UserId]
      FROM [BCAuthorizeLst] AS [b]
      WHERE ([b].[Status] = 4) AND [b].[RejectionSentDateTime] IS NULL

[jhermsen]

Did a full reset of all cache and auth data in firefox and if I now try to open http://localhost:4200 I get at least the top menu.
Now if I Inspect I get the following:
ERROR Error: Uncaught (in promise): Error: Can not load User Profile without access_token

[simpleidserver]

This exception is intentionally thrown by the library angular-oauth2-oidc (you can check the code source here : https://github.com/manfredsteyer/angular-oauth2-oidc/blob/d95d7da788e2c1390346c66de62dc31f10d2b852/projects/lib/src/oauth-service.ts#L739) ,when it is trying to fetch the user information from the userinfo endpoint and there is no valid access token because you are still not authenticated. This error is not considered as an issue :)

If you click on the button"Authentifier (Authenticate)", your user-agent should be redirected to the OPENID server.

Default credentials:

Login : administrator
Password: password

[jhermsen]

Oke, can't the error be catched and shown on screen?

Accessing the hosts it also asks to authenticate using certificate, is that normal?:

Currently I have it working in Firefox, other browsers still trying to figure out what is going wrong there.
Thanks for the help.

[simpleidserver]

Hello,

It is normal :) By default SimpleIdServer OPENID server is configured to authorize Client certificate (for more information you can refer to the official documentation : https://learn.microsoft.com/en-us/aspnet/core/security/authentication/certauth?view=aspnetcore-6.0)
This option is enabled by default because SimpleIdServer OPENID server supports different authentication methods such as:

• self_signed_tls_client_auth
• tls_client_auth

Those authentication methods need the client certificate to perform the authentication.

Because the website is not using one of them, you can ignore the authentication by clicking on the "cancel" btn :)

KR,

SID

[jhermsen]

Thank you very much for the additional info.
I can now play with it and see what it all does and might suit our needs.