OIDC token_type issue, Token type must be Bearer

Elastic Stack Elasticsearch
1

Hi, I am trying to setup OIDC Authentication. Open ID Connect Provider I am using sends id_token, access token, etc. All tokens are JWT. The issue I am facing is token_type field sent from Open ID Connect provider. The value of the field is 'jwt'. It seems that this caues issues with the authentication process since in logs on my deployment I get the following error:

Authentication to realm oidc1 failed - Failed to authenticate user with OpenID Connect (Caused by ElasticsearchSecurityException[Failed to exchange code for Id Token using the Token Endpoint. Unable to parse Token Response]; nested: ParseException[Token type must be Bearer]:wink:

Is there a way to configure my realm so that it accepts different values for token_type? Thanks

2

@Yang_Wang is it possible to adjust tcp_retries2 in Elastic on Azure managed service?

3

Are you on Elastic Cloud? If that's the case, you should raise a support ticket for the issue which is better for collecting all necessary information and working out a solution.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.