Comments (5)
Thanks for your reply, no problem, we're all busy. I tested with a fresh private tab with my cookie remover disabled (I did have one) and ad bock turned off. I also had a friend test it. Still gives the same error. I just setup another OpenID provider and am going to test against that next.
from wg-access-server.
@verdin sorry for being so slow to reply here.
I'm unsure what the issue is but it might be an issue with Cookies.
The nonce is saved in the client's session here (code). Is something in your setup breaking the session cookie? perhaps a browser extension or a proxy dropping the session cookie?
from wg-access-server.
After digging into this more I was still unable to prevent this problem. Seems like AWS Cognito may not handle the nonce in a normal way or something about my setup interferes with the url. I am using Traefik as a reverse proxy if that's relevant.
To resolve this problem for my setup I used another OIDC login with Traefik Forward Auth in front of the web interface. I have not determine why this works without nonce problem. I'll update this issue if I figure it out.
from wg-access-server.
@verdin Do you mind sharing your docker compose? I'm using Traefik with forward auth too and am able to access the wg-access-server webui and generate tunnels but when connecting to the VPN from my phone it doesn't work.
from wg-access-server.
Hi @robflate apologies for the late reply, here is my configs https://github.com/verdin/wg-traefik-files.
My setup was originally based on docker swarm so you might seem some warnings from that sort of config, it still works in normal docker-compose.
from wg-access-server.
Related Issues (20)
- Arm Support HOT 3
- the input device is not a TTY
- Initial VPN
- Cannot parse endpoint from wireguard android app HOT 2
- Control trafic user HOT 2
- [Feature request] label outdated devices HOT 1
- doc / feature to port forward in yaml rules ? HOT 1
- Disable basic auth at all HOT 3
- Fresh install on Kubernetes cant access services
- Fresh install on Kubernetes cant access services HOT 2
- how to use grpc?
- Can this app be used with an existing wireguard?
- How can I continue to see the transmission flow of each Peer on the management page?
- Running on Mac M2 HOT 1
- OIDC Azure issue HOT 3
- How to configure Docker's NAT? HOT 1
- linux/arm64/v8 HOT 1
- can't initialize iptables table `filter': Table does not exist HOT 1
- Help! HOT 1
- Need to change DNS address and DHCP SERVER. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wg-access-server.