HELP - OpenVPN 2.5.9

[lilian]

Hello everyone,
I am experiencing an authentication issue with OpenVPN 2.5.9.
Has the SSO been modified?
Thank you in advance.

code: 'OAUTH_AUTHORIZATION_RESPONSE_ERROR',
Sep 28 11:43:14 error: 'invalid_scope',
Sep 28 11:43:14 error_description: 'scope contains invalid characters'
Sep 28 11:43:14 }
Sep 28 11:43:14 GET /?error=auth_failed 200 0.972 ms - 818

[joseph]

@lilian said:

Sep 28 11:43:14 GET /?error=auth_failed 200 0.972 ms - 818

I think this was fixed. Which version of Cloudron are you on and which version of the VPN package?

[lilian]

Upon analysis, the issue stemmed from the Tegel 1.3.0 library used by the OpenVPN application: it was adding a space at the end of the OIDC scope:

scope=openid profile email[espace]

I created a patched Docker image for the OpenVPN 2.13.0 application by modifying the scope generation to use .trim(), thereby removing that space.
After redeploying the application with this image, the scope is generated correctly:

scope=openid profile email

OIDC authentication and access to the OpenVPN interface are working again, without modifying existing VPN configurations.

[joseph]

@lilian yes, this is exactly what was already fixed. Can you check your Cloudron version and VPN package version?

[lilian]

Hello,
Cloudron version 10.0.5
OpenVPN 2.13.0
I stuck with this version because updating to the next one really messed up my VPN connections.