Could not authenticate you from [My Provider name] because "Unknown"

[habin201291]

Hi!

I am using doorkeeper-openid_connect gem as an OIDC provider.

When I clicked on the Login button at the client and got an error below:
Could not authenticate you from Docerfy because "Unknown".
Docerfy is name of OIDC provider.

My configurations in Devise.rb file below:
config.omniauth :openid_connect, {
name: :docerfy,
issuer: "https://774e-117-3-70-40.ngrok-free.app/",
scope: [:openid, :email],
response_type: :code,
uid_field: "preferred_username",
require_state: false,
client_options: {
port: 443,
scheme: "https",
host: "774e-117-3-70-40.ngrok-free.app",
authorization_endpoint: "/oauth/authorize",
token_endpoint: "/oauth/token",
identifier: "BYUfnhIsbHuRb5Fs638WZdQZCGhEboVREiL3yAtthQw",
secret: "nsccbh5P3y3ovKOEVUBsw23HW-mt0gtJfQFdBl_AOwA",
redirect_uri: "https://a683-117-3-70-40.ngrok-free.app/users/auth/docerfy/callback",
},
}

I am quite confused because I do not know if the error lies in these gems or from somewhere else.

Hope this help!

[davidwessman]

I would recommend using discovery: true if possible, helped me with a lot of issues.
But only if your provider supports discovery.

[habin201291]

I would recommend using discovery: true if possible, helped me with a lot of issues. But only if your provider supports discovery.

It seems to be working, thank you very much, but I have another problem. The OIDC client returned the following error:
Undefined method with_indifferent_access for "<a href=\"https://3e90-117-3-70-40.ngrok-free.app/oauth/discovery/keys\">temporary redirect</a>.\n\n":string

And the link above shows a json like: {"keys":[{"kty":"RSA","n":"wVRCGZ4KEqa1OwECAhupl0KoaPd8nYFi94IsjdcRrZkYG_s7a248s5r1mw_OBE5OIvkVFUCOIY_vXQcx-KFawTFrWhOvIffSqy6i7pMRDGB78J-teW5XvbtB4nhSy3wWtuYi9cIlbcFT2n3pJLCKLj_wss_MWkBTZpZtB2ynqe6MgjZevkbLIAEGroMYlrTX2ijFcrJYKO7mJMWfzO8_lKeu2tG9IKL-epC-72oMpCP95cs8_e7xSlI7VBX5nsl_8490oom2ISu5mK-aWIppvgQlRoG4_61EI50P53pr3xJTle3M1BpV-AFOlKLHZmME_g3bjhlIXcU6mcL9kYd56w","e":"AQAB","kid":"dtXls8aranECkXUaG8BBFsOZJVAbys7hLQnqGp1Qv0I","use":"sig","alg":"RS256"}]}

[davidwessman]

Does your IDP-provider support the .well-known/openid-configuration endpoint?
For example: https://accounts.google.com/.well-known/openid-configuration

Seems like some ruby-gem expects an array and not another link