Unable to log in

[gdeflaux]

Hi,

I am unable to login Penpot. Here are the steps:

1. Open Penpot url
2. Click the OpenID button
3. Log in my Cloudron instance
4. Click the Authorize button (url: https://my.xxxxxxxx.fr/openid/interaction/yyyyyyyyy)
5. Redirected to the Penpot login page at the following url: https://design.xxxxxxx.fr/#/auth/login?error=unable-to-auth&hint=inconmplete+user+info&type=internal&code=incomplete-user-info

Here are the logs:

Feb 21 14:45:27 172.18.0.1 - - [21/Feb/2024:13:45:27 +0000] "POST /api/auth/oauth/oidc?error=unable-to-auth&hint=inconmplete+user+info&type=internal&code=incomplete-user-info HTTP/1.1" 200 424 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
Feb 21 14:45:29 [2024-02-21 13:45:29.087] W app.auth.oidc - hint="received incomplete profile info object (please set correct scopes)", info={:backend "oidc", :fullname nil, :email nil, :props {:oidc/at_hash "sYyFsgLIJcKKOtx3f-8p1A"}}
Feb 21 14:45:29 172.18.0.1 - - [21/Feb/2024:13:45:29 +0000] "GET /api/auth/oauth/oidc/callback?code=iCaW4Z4x72AgsqvIvqQX2_NYw5WfGrLDpT4YDxp1p9m&state=eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.ZmQ9R7c2ed4CU5WLdN493vXQmTL05rv32cwkdB_qE8WnMckqbauUjw.1jfD7kBWBZiNyPHD.Zm-mSkpHQGaGtrNM48abnG2qlalRuXwjQyc5zGS1PA8A7hhFNSniwdfCgzbsa080GuqFDSlf3JJfcqIcLENKyP-KoCgMqa2ELIfD6KXDZFBt4oVJw13gMWjqWfvP.An4mLMCGe4Mfsdkt7i0iSg&iss=https%3A%2F%2Fmy.ouechbien.fr%2Fopenid HTTP/1.1" 302 0 "https://my.ouechbien.fr/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
Feb 21 14:45:29 [2024-02-21 13:45:29.094] W app.auth.oidc - hint="error on oauth process"
Feb 21 14:45:29 SUMMARY:
Feb 21 14:45:29 → clojure.lang.ExceptionInfo: inconmplete user info (oidc.clj:440)
Feb 21 14:45:29 DETAIL:
Feb 21 14:45:29 → clojure.lang.ExceptionInfo: inconmplete user info (oidc.clj:440)
Feb 21 14:45:29 at: app.auth.oidc$get_info.invokeStatic(oidc.clj:440)
Feb 21 14:45:29 app.auth.oidc$get_info.invoke(oidc.clj:416)
Feb 21 14:45:29 app.auth.oidc$callback_handler.invokeStatic(oidc.clj:566)
Feb 21 14:45:29 app.auth.oidc$callback_handler.invoke(oidc.clj:563)
Feb 21 14:45:29 app.auth.oidc$fn__29169$fn__29171$fn__29173.invoke(oidc.clj:580)
Feb 21 14:45:29 app.http.session$wrap_authz$fn__21738.invoke(session.clj:226)
Feb 21 14:45:29 clojure.core$partial$fn__5908.invoke(core.clj:2640)
Feb 21 14:45:29 promesa.util.Supplier.get(util.cljc:34)
Feb 21 14:45:29 java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1768)
Feb 21 14:45:29 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
Feb 21 14:45:29 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
Feb 21 14:45:29 java.lang.Thread.run(Thread.java:1589)
Feb 21 14:45:29 dt: {:type :internal,
Feb 21 14:45:29 :code :incomplete-user-info,
Feb 21 14:45:29 :hint "inconmplete user info",
Feb 21 14:45:29 :info {:backend "oidc", :fullname nil, :email nil, :props {:oidc/at_hash "sYyFsgLIJcKKOtx3f-8p1A"}}}
Feb 21 14:45:29

Any idea what's going on?

Thanks,

[nebulon]

Not sure, I can't reproduce this issue here, neither on a fresh nor older instance. Have you found anything related in the upstream issue tracker?

Given the exception about incomplete user info, is there anything missing strange in the profile? Maybe special characters which penpot potentially can't handle well?