Web application example error (FastAPI)

[Aakashagr]

Hello,

I am trying to execute the example code for the web application under fastapi. However, when I open the link (localhost:8000/protected), I receive "internal server error " text instead of the login page.

I have only updated the base URL, client ID and secret key in the example code. It would be very helpful if you can help me understand if I missed anything else. I am not a developer and trying to learn through documentation.

Thank you.
Aakash

Update: I was able to resolve the internal server error issue by deleting the cookies. However, now the redirect URL again shows an internal server error. Also, when I reload the localhost:8000/protected page, I get back the same error. So, I need to delete cookies every time to land on the authentication page.

[fief-bailiff[bot]]

Hail, @Aakashagr 👋 Welcome to Fief's kingdom!

Our team will get back to you very soon to help.

In the meantime, take a minute to star our repository ⭐️

Farewell!

[frankie567]

Hi @Aakashagr 👋

Could you share with us the complete stack trace of the error? In the terminal which runs the example, you should have a detailed output of the error.

[Aakashagr]

This is the output

(base) D:\research\languagelearning\flet>uvicorn auth:app
←[32mINFO←[0m: Started server process [←[36m18648←[0m]
←[32mINFO←[0m: Waiting for application startup.
←[32mINFO←[0m: Application startup complete.
←[32mINFO←[0m: Uvicorn running on ←[1mhttp://127.0.0.1:8000←[0m (Press CTRL+C to quit)
←[32mINFO←[0m: 127.0.0.1:64950 - "←[1mGET /protected HTTP/1.1←[0m" ←[33m307 Temporary Redirect←[0m
←[32mINFO←[0m: 127.0.0.1:64951 - "←[1mGET /auth-callback?code=yXhvzE9Amkrc1tShfHG7LqX742e0GpgmJ9KjEifxIMo HTTP/1.1←[0m" ←[91m500 Internal Server Error←[0m
←[31mERROR←[0m: Exception in ASGI application
Traceback (most recent call last):
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fief_client\client.py", line 272, in _decode_id_token
signed_id_token = jwt.JWT(jwt=id_token_claims, algs=["RS256"], key=jwks)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\jwcrypto\jwt.py", line 231, in init
self.deserialize(jwt, key)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\jwcrypto\jwt.py", line 680, in deserialize
self.validate(key)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\jwcrypto\jwt.py", line 626, in validate
raise TypeError("Expected {}, got JWE".format(et))
TypeError: Expected JWS, got JWE

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\uvicorn\protocols\http\httptools_impl.py", line 404, in run_asgi
result = await app( # type: ignore[func-returns-value]
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\uvicorn\middleware\proxy_headers.py", line 78, in call
return await self.app(scope, receive, send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fastapi\applications.py", line 270, in call
await super().call(scope, receive, send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\applications.py", line 124, in call
await self.middleware_stack(scope, receive, send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\middleware\errors.py", line 184, in call
raise exc
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\middleware\errors.py", line 162, in call
await self.app(scope, receive, _send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\middleware\exceptions.py", line 75, in call
raise exc
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\middleware\exceptions.py", line 64, in call
await self.app(scope, receive, sender)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fastapi\middleware\asyncexitstack.py", line 21, in call
raise e
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fastapi\middleware\asyncexitstack.py", line 18, in call
await self.app(scope, receive, send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\routing.py", line 680, in call
await route.handle(scope, receive, send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\routing.py", line 275, in handle
await self.app(scope, receive, send)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\starlette\routing.py", line 65, in app
response = await func(request)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fastapi\routing.py", line 235, in app
raw_response = await run_endpoint_function(
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fastapi\routing.py", line 161, in run_endpoint_function
return await dependant.call(**values)
File "D:\research\languagelearning\flet.\auth.py", line 67, in auth_callback
tokens, userinfo = await fief.auth_callback(code, redirect_uri)
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fief_client\client.py", line 769, in auth_callback
userinfo = self._decode_id_token(
File "C:\Users\Aakash\AppData\Roaming\Python\Python39\site-packages\fief_client\client.py", line 287, in _decode_id_token
raise FiefIdTokenInvalid() from e
fief_client.client.FiefIdTokenInvalid

[frankie567]

So, it looks like you enabled ID Token encryption on your client but didn't pass the encryption key. So two solutions:

1. You want to keep ID Token encryption. In this case, follow the instructions here: https://docs.fief.dev/going-further/id-token-encryption/#enable-id-token-encryption If you didn't copy/paste your encryption key the first time, you'll have to regenerate it.
2. If you don't want to keep ID Token encryption, you can create a new client.

[Aakashagr]

So, it looks like you enabled ID Token encryption on your client but didn't pass the encryption key. So two solutions:

1. You want to keep ID Token encryption. In this case, follow the instructions here: https://docs.fief.dev/going-further/id-token-encryption/#enable-id-token-encryption If you didn't copy/paste your encryption key the first time, you'll have to regenerate it.
2. If you don't want to keep ID Token encryption, you can create a new client.

Thanks a lot for your prompt response. It is working fine now

[filipagh]

@frankie567 which one field is key https://docs.fief.dev/assets/images/id-token-encryption-copy-key.png?
and what are others?

[frankie567]

@filipagh Actually, the whole thing is the key. For convenience, you can put in on a single line: {"kty":"RSA", "use":"enc", ...}