OpenID Connect Error on iOS

[BrutalBirdie]

@hakunamatata Since I was helping to debug the Android App I created the issue
https://github.com/traccar/traccar-manager/issues/7
All credit to @james tho, he did the majority of the work!

[james]

@BrutalBirdie Thank you for helping with the Android app!
The app was already updated it seems but the Google Play Store did not receive the update yet.

[hakunamatata]

Great teamwork all ! Good to also see the Traccar developer being so prompt to act on this. Traccar Manager v5.1 has not yet been released to the Apple App Store. Will test the OIDC login again once it is available and revert.

[hakunamatata]

Okay just tested with the new version of the Cloudron app as well as the Traccar manager app but it unforunately still isn't working.

When you click on the "Login with OpenID" in the mobile app, Safari pops up with "Open this page in Traccar Manager -- Cancel/Open?"
If you select "Cancel" and go back to the mobile app, you get the "Frame load interrupted" error message.
If you select "Open", the Traccar webpage opens up in Safari while the mobile app still shows "Frame load interrupted".

So at this point there no longer is a "OpenID Connect Error - redirect_uri did not match any of the client's registered redirect_uris", however you still are unable to log into the Traccar Manager mobile app (atleast on iOS) using OpenID.

Maybe one of you folks can test it on Android?

[james]

Hello @hakunamatata
I have tested the updated app on android and have no issues.
Also tested the updated iOS app and found that with Safari and Brave the login with OpenID works but instead of forwarding that session to the app it does open it in the browser.
This might be valid to raise with an issue again upstream.

[hakunamatata]

@james , thanks for your feedback. I have gone ahead and created a new issue for it: https://github.com/traccar/traccar-manager/issues/8

[hakunamatata]

@james , the Traccar developer has asked "Has the native app URL been registered?"

I assume the answer is yes, but how would I go about to check the change that was made in Cloudron package update that was published yesterday?

[joseph]

Looks like package version 1.17.2 fixes something oidc related . @james can confirm . You can check the package version in the Info section of the app.

[james]

@joseph all good.
The android app is working as intended. iOS is a special case. As always.
@BrutalBirdie also added information to the GitHub upstream issue from @hakunamatata

[hakunamatata]

@james the developer has released v5.1.1 which is supposed to have fixed the issue, however I am still experiencing the same behavior when I try to sign into the iOS app using OpenID. Can you please test on your iPhone and advise if it is the same for you as well?

[bjoernch]

@james I saw this issue is already fixed and you can just add "org.traccar.manager:/api/session/openid/callback" as a Callback URL which is great, but not yet reflected in the official documentation. It would be really useful to add this to the OpenID Connect documentation at https://www.traccar.org/openid-sso/ — especially the note about adding org.traccar.manager:/api/session/openid/callback as a second redirect URI to support iOS.

[nebulon]

Just to check, the Cloudron package already adds org.traccar.manager:/api/session/openid/callback as a secondary supported/trusted callback URI. Is there still an issue with iOS?

[james]

@nebulon
I have tested this with my iOS device and there was no issue with the Cloudron app.

[hakunamatata]

I can confirm that this issue was fixed with the changes made in the Cloudron app as well as upstream by the Traccar developers several months ago.