{"msg":"oauth2: cannot fetch token: 400 Bad Request\nResponse: {\"error\":\"invalid_grant\",\"error_description\":\"Code not valid\"}"} #19939

hirendave47 · 2023-04-25T14:03:35Z

hirendave47
Apr 25, 2023

While using oauth2-proxy (https://github.com/oauth2-proxy/oauth2-proxy) with Keycloak..

Getting below error from oauth2-proxy endpoint /oauth2/callback after redirected from successful login.

{"msg":"oauth2: cannot fetch token: 400 Bad Request\nResponse: {\"error\":\"invalid_grant\",\"error_description\":\"Code not valid\"}"}

Below log extract from Keycloak pod :

2023-04-25 13:49:41,782 WARN  [org.keycloak.events] (executor-thread-91) type=CODE_TO_TOKEN_ERROR, realmId=885bf23b-49a0-4d7a-89f5-76b7541d01ff, clientId=urnstack, userId=7538f1fc-d254-4c97-ac60-bb5ff6de294a, ipAddress=10.0.0.4, error=invalid_code, grant_type=authorization_code, code_id=634bcc7c-eabd-4295-9df2-9637c37a00ff, client_auth_method=client-secret
2023-04-25 13:49:41,783 WARN  [org.keycloak.protocol.oidc.utils.OAuth2CodeParser] (executor-thread-91) Code '8f5759a2-d658-430d-a9f6-298f387dc5d6' already used for userSession '634bcc7c-eabd-4295-9df2-9637c37a00ff' and client '38183741-cafd-4386-a8a6-a3418ccf74f4'.
2023-04-25 13:49:41,783 WARN  [org.keycloak.events] (executor-thread-91) type=CODE_TO_TOKEN_ERROR, realmId=885bf23b-49a0-4d7a-89f5-76b7541d01ff, clientId=urnstack, userId=null, ipAddress=10.0.0.4, error=invalid_code, grant_type=authorization_code, code_id=634bcc7c-eabd-4295-9df2-9637c37a00ff, client_auth_method=client-secret
2023-04-25 13:49:42,807 WARN  [org.keycloak.events] (executor-thread-91) type=CODE_TO_TOKEN_ERROR, realmId=885bf23b-49a0-4d7a-89f5-76b7541d01ff, clientId=urnstack, userId=7538f1fc-d254-4c97-ac60-bb5ff6de294a, ipAddress=10.0.0.4, error=invalid_code, grant_type=authorization_code, code_id=634bcc7c-eabd-4295-9df2-9637c37a00ff, client_auth_method=client-secret
2023-04-25 13:49:42,809 WARN  [org.keycloak.protocol.oidc.utils.OAuth2CodeParser] (executor-thread-91) Code '567937f9-be77-4ca3-997e-0e2647ced10c' already used for userSession '634bcc7c-eabd-4295-9df2-9637c37a00ff' and client '38183741-cafd-4386-a8a6-a3418ccf74f4'.
2023-04-25 13:49:42,809 WARN  [org.keycloak.events] (executor-thread-91) type=CODE_TO_TOKEN_ERROR, realmId=885bf23b-49a0-4d7a-89f5-76b7541d01ff, clientId=urnstack, userId=null, ipAddress=10.0.0.4, error=invalid_code, grant_type=authorization_code, code_id=634bcc7c-eabd-4295-9df2-9637c37a00ff, client_auth_method=client-secret

Below log from Golang backend pod which responds to /oauth2/callback after successfull login attempt (Always seeing two callbacks in the logs here after successfull login):

[GIN] 2023/04/25 - 13:49:41 | 400 |   18.815605ms |    10.206.66.27 | GET      "/oauth2/callback?state=-kbVDjkyRCdDKVH6FDX5RrsJKf-r_4o6j5CqDuhQQls%3A%2F&session_state=634bcc7c-eabd-4295-9df2-9637c37a00ff&code=8f5759a2-d658-430d-a9f6-298f387dc5d6.634bcc7c-eabd-4295-9df2-9637c37a00ff.38183741-cafd-4386-a8a6-a3418ccf74f4"
[GIN] 2023/04/25 - 13:49:42 | 400 |    4.201168ms |    10.206.66.27 | GET      "/oauth2/callback?state=cyu7QxXQWLTxgIQION8Ue7RKAwzBQyId6mvaFNicmrg%3A%2Ffavicon.ico&session_state=634bcc7c-eabd-4295-9df2-9637c37a00ff&code=567937f9-be77-4ca3-997e-0e2647ced10c.634bcc7c-eabd-4295-9df2-9637c37a00ff.38183741-cafd-4386-a8a6-a3418ccf74f4"

Appreciate any suggestions to resolve this issue.

hirendave47 · 2023-04-26T06:46:02Z

hirendave47
Apr 26, 2023
Author

Issue resolved after I replaced Keycloak IP address with FQDN in Golang code, like I was using FQDN in oauth2-proxy config.

0 replies

Navigation Menu

Repository navigation

{"msg":"oauth2: cannot fetch token: 400 Bad Request\nResponse: {\"error\":\"invalid_grant\",\"error_description\":\"Code not valid\"}"} #19939

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

{"msg":"oauth2: cannot fetch token: 400 Bad Request\nResponse: {\"error\":\"invalid_grant\",\"error_description\":\"Code not valid\"}"} #19939

Uh oh!

hirendave47 Apr 25, 2023

Replies: 1 comment

Uh oh!

hirendave47 Apr 26, 2023 Author

hirendave47
Apr 25, 2023

hirendave47
Apr 26, 2023
Author