Error returning OAuth user info: missing_token #1821
Comments
|
Authlib also had a version update. Hardcode authlib in requirements to 0.15.5 and it fixed it for me. |
|
@ltrogers98 could you provide a pip freeze? I still get a "You are not Authorized" it must be a conflicting package or a internal Airflow Setting Update: Nevermind I had to update the whitelits from my example. It's working now. Thank you! I will inform Airflow Repo as well |
2 tasks
|
Authlib 1.0.1 released today fixed the issue. I recommend to upgrade it. |
6 tasks
|
the authlib bump (now is <2) is merge into master. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I'm implementing google oauth with Airflow 2.2.1. The oauth creds are managed through flask-appbuilder. I expect to be able to sign in to Airflow using Google Oauth and be redirected to airflow home page
Environment
Flask-Appbuilder version: 3.4.5
Airflow Version: 2.2.1
pip freeze output:
Describe the expected results
Google OAuth should be able to authenticate and redirect to the Airflow home page
I followed this documentation. My google oauth/airflow settings are below.
Describe the actual results
The Oauth provider page is present but I cant login. When I click login I get an error message saying
Invalid login. Please try again.I have made sure that my previous login was deleted to allow for google oauth. I started investigating the http logs. Pasted below. I removed system log and timestamps from the logs to reduce noise."GET /login/ HTTP/1.1" 200 16325 "https://custom-url.mycompany.com/" "GET /login/google?next= HTTP/1.1" 302 963 "https://custom-url.mycompany.com/login/" {views.py:671} ERROR - Error returning OAuth user info: missing_token: {views.py:671} ERROR - Error returning OAuth user info: missing_token: "GET /oauth-authorized/google?state=xxxxxxxxxx&code=xxxxxxxxxxxx&scope=email+profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile+openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email&authuser=0&hd=infarm.com&prompt=none HTTP/1.1" 302 221 "https://custom-url.mycompany.com/" "GET /login/ HTTP/1.1" 200 16325 "https://custom-url.mycompany.com/" "GET /login/google?next= HTTP/1.1" 302 963 "https://custom-url.mycompany.com/login/" {views.py:671} ERROR - Error returning OAuth user info: missing_token: {views.py:671} ERROR - Error returning OAuth user info: missing_token: 34.117.72.15 - - [21/Mar/2022:11:48:32 +0000] "GET /oauth-authorized/google?state=xxxxxxxxxxxxx&code=xxxxxxxxxx&scope=email+profile+openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile&authuser=0&hd=infarm.com&prompt=none HTTP/1.1" 302 221 "https://custom-url.mycompany.com/"Notes
I removed my state and code values with x. I also changed my actual URL with https://custom-url.mycompany.com/. I am surprised to see
prompt=noneandauthuser=0because prompt should be consent and I would expect some kind of reference to my account in authuser.I have another workflow I use to generate oauth tokens from google. I was able to generate my auth token there and was given a warning message pasted below, maybe this helps. I would be happy to submit a PR if I could debug and confirm it's working. I tried changing the scope in the OAUTH provider config as well, no success. When I changed the scope I had to define
"jwks_uri": "https://www.googleapis.com/oauth2/v3/certs"in OAUTH_PROVIDERS["remote_app"]The text was updated successfully, but these errors were encountered: