bad nonce error on oidc login flow about wg-access-server HOT 5 OPEN

Thanks for your reply, no problem, we're all busy. I tested with a fresh private tab with my cookie remover disabled (I did have one) and ad bock turned off. I also had a friend test it. Still gives the same error. I just setup another OpenID provider and am going to test against that next.

from wg-access-server.

@verdin sorry for being so slow to reply here.

I'm unsure what the issue is but it might be an issue with Cookies.

The nonce is saved in the client's session here (code). Is something in your setup breaking the session cookie? perhaps a browser extension or a proxy dropping the session cookie?

from wg-access-server.

After digging into this more I was still unable to prevent this problem. Seems like AWS Cognito may not handle the nonce in a normal way or something about my setup interferes with the url. I am using Traefik as a reverse proxy if that's relevant.

To resolve this problem for my setup I used another OIDC login with Traefik Forward Auth in front of the web interface. I have not determine why this works without nonce problem. I'll update this issue if I figure it out.

from wg-access-server.

@verdin Do you mind sharing your docker compose? I'm using Traefik with forward auth too and am able to access the wg-access-server webui and generate tunnels but when connecting to the VPN from my phone it doesn't work.

from wg-access-server.

Hi @robflate apologies for the late reply, here is my configs https://github.com/verdin/wg-traefik-files.

My setup was originally based on docker swarm so you might seem some warnings from that sort of config, it still works in normal docker-compose.

from wg-access-server.