Apache Answer throws OpenID connect error

[BrutalBirdie]

@philkunz
You have not recently changed your base domain? Example from my.yyy.yyy to my my.xxx.xxx?
A bit confusing, but you get what I write I hope

[philkunz]

nope. xxx.xxx was always xxx.xxx

[BrutalBirdie]

Have you tried restarting the app? (just in case)
Because normally on every restart the app sets / updates the oidc config.

What we can try is to manually delete that config and restart the app.

To delete this go to your web-terminal and copy-paste:

mysql --user=${CLOUDRON_MYSQL_USERNAME} --password=${CLOUDRON_MYSQL_PASSWORD} --host=${CLOUDRON_MYSQL_HOST} ${CLOUDRON_MYSQL_DATABASE} -e "DELETE FROM plugin_config WHERE plugin_slug_name='basic_connector'"

and then restart the app.

Then a complete fresh config set should be present, printable by the same command again.

mysql --user=${CLOUDRON_MYSQL_USERNAME} --password=${CLOUDRON_MYSQL_PASSWORD} --host=${CLOUDRON_MYSQL_HOST} ${CLOUDRON_MYSQL_DATABASE} -e "SELECT * FROM plugin_config WHERE plugin_slug_name='basic_connector' \G"

Then we can compare both outputs if something has changed or is missing or got added yada yada.

Maybe just the restart, or deletion and restart is already enough.

[philkunz]

tried that, still the same error.

[philkunz]

[philkunz]

All other apps work without a hitch. Also xxx.xxx is correct.

[philkunz]

Also changing the location does not do the trick, which should update the redirect url.

[nebulon]

@philkunz so to narrow this down, if you install a fresh instance of the app, does it work then?

[philkunz]

Fresh install works as expected.

Just took a look at the redirect uri:

&redirect_uri=%2Fanswer%2Fapi%2Fv1%2Fconnector%2Fredirect%2Fbasic&response_type=code&scope=openid+profile+email&state=state

That looks incomplete?

[nebulon]

Hm the values within the db should at least get ensured at https://git.cloudron.io/packages/apache-answer-app/-/blob/main/start.sh?ref_type=heads#L90

[nebulon]

ah the callback uri is not dynamic path wise, so my link is not helping.

[BrutalBirdie]

@philkunz
Can you compare your faulty instance with the fresh one under the following admin path https://apacheanswers.DOMAIN.TLD/admin/basic_connector?
Maybe there is something in the UI that we are not seeing here

[philkunz]

I'll use a fresh install then.

[nebulon]

tracking down changes in the package, that URI hasn't actually changed at all through an update or so. Did you maybe happen to manually configure OpenID integration at some point?