Hi, I'm trying to set up OpenID Connect (at <boldd...
# ory-network
a
Hi, I'm trying to set up OpenID Connect (at bolddesk.com), but I'm asked to enter a "Authority URL". What do I enter there? Tried a few things but none worked
Hm, the endpoint listed as authorize also doesn't work (/oauth2/auth), I always get an "An unforeseen error occurred while processing your request." when trying to sign in at Bolddesk
h
I think the authority URL is the url without the
oauth2
at the end
a
Thanks, tried that as well but they still give me a 500 error without details 😞 Any idea if something's wrong with my config? Perhaps I need to set a different authentication method or something, unfortunately they have very little documentation on the required setup...
Ah just realized I was missing
profile
and
email
scopes, but that didn't help either
h
Have you made progress with this?
a
I have gotten further by using OAuth2 instead of OIDC. I'm presented with the Ory login form, but after returning to Bolddesk, it doesn't show me as logged in and login button doesn't even work anymore 🤷‍♂️ Perhaps their integration is broken or something, idk Is it normal that the /oauth2/userinfo endpoint returns a 404?
h
The userinfo endpoint is just
/userinfo
🙂
a
You may want to correct this URL then But FWIW I tried /userinfo as well and that didn't help either
I have reached out to Bolddesk and they've told me this:
We found below exception logged in your tenant,
Copy code
"The authorization server encountered an unexpected condition that prevented it from fulfilling the request. Could not ensure that signing keys for 'hydra.openid.id-token' exists. If you are running against a persistent SQL database this is most likely because your 'secrets.system' ('SECRETS_SYSTEM' environment variable) is not set or changed. When running with an SQL database backend you need to make sure that the secret is set and stays the same, unless when doing key rotation. This may also happen when you forget to run 'hydra migrate sql.."
You have to resolve this in your Ory server side, please find related articles for above issue,
https://github.com/ory/hydra/discussions/2315
https://www.ory.sh/docs/hydra/reference/configuration
Please let us know if you need any additional information on this.
Since I'm on the hosted Ory network, I don't think this is something I can fix
I have tried again using my production project, and OIDC worked fine. So I think this issue only affects my test project (clever-wing-lozwnz5w7t). No big deal whatsoever, don't bother looking into it unless you think it could also affect other projects
h
👍
thank you for the head sup