Verdaccio showing user: null in logs after logging in with cloudron and npm login shows redirect_uri did not match any of the client's registered redirect_uris

[ChristopherMag]

I haven't logged into our Verdaccio instance in over 8 months and I believe during that time the application was transitioned to using cloudron's openid endpoint for identity management.

When I log in now I don't see any of the packages though I can see they are on disk still in the /app/data folder.

My config.yaml has the following permissions which should let me see the packages:

packages:
  '@*/*':
    access: $all
    publish: $authenticated
    unpublish: $authenticated
    proxy: npmjs
  '**':
    access: $authenticated
    publish: $authenticated
    unpublish: $authenticated
    proxy: npmjs

In the logs I see the following:

May 22 14:23:50 info <-- 172.18.0.1 requested 'GET /'
May 22 14:23:50 http <-- 200, user: null(172.18.0.1), req: 'GET /', bytes: 0/0
May 22 14:23:50 http <-- 200, user: null(172.18.0.1), req: 'GET /', bytes: 0/665
May 22 14:24:00 info <-- 172.18.0.1 requested 'GET /'
May 22 14:24:00 http <-- 200, user: null(172.18.0.1), req: 'GET /', bytes: 0/0
May 22 14:24:00 http <-- 200, user: null(172.18.0.1), req: 'GET /', bytes: 0/665

This seems to indicate that even though I am logged in via the web interface and can see my username when clicking the silhouette in the top right corner, the backend is still confused and treating my user as null.

When I try to login via npm login it opens a browser to the cloudron hosted login pages, to which I am already logged into in that browser, and it displays redirect_uri did not match any of the client's registered redirect_uris.

[james]

Hello @ChristopherMag

Try to log in with ODIC in a private browser tab and report back if that already is the solution.
Also for npm login with ODIC see => https://docs.cloudron.io/apps/verdaccio/#cli-authentication

[joseph]

verdaccio recently went through many major changes (see the recent forum posts here). I would first quickly check with a fresh installation because I suspect some migration issue (might help to compare the old and new configs)

[ChristopherMag]

@james When logging in with OIDC in a private browser window, after signing in with cloudron credentials I am redirected back to Verdaccio and see the error "State parameter does not match a known state"

If I go back to the Verdaccio root url and sign in using open id again it doesn't prompt me for the cloudron username and password and does take me to the home page and shows that I am logged in and clicking the silhouette in top right shows my username.

I still see no packages and the logs still show user: null.

[james]

Hello @ChristopherMag

Sorry to read that you are still having issues.
Did you checkout the other post and did you try what @joseph suggested?