🐛 Bug Report: JWT+ID token breaks Proxmox OIDC auth #254

New Issue

AtHeartEngineer · 2025-07-08T08:43:40-04:00

AtHeartEngineer commented

2025-07-08 08:43:40 -04:00

Originally created by @nervous-inhuman on 4/13/2025

Reproduction steps

When trying to use PocketID with Proxmox, the login/auth flow is broken

Repro:

Setup Proxmox as an OIDC Client
Configure Proxmox to use PocketID
Try to login
Fail

Expected behavior

User should get authenticated successfuly.

Actual Behavior

Configuration:

Error when trying to log-in using OIDC after configuration:

From the Proxmox logs, you can see this error:

pvedaemon[280768]: openid authentication failure; rhost=<ip> msg=Failed to verify ID token: Unsupported: unexpected or unsupported JWT type `ID+JWT`

Which seems to come from here:
57b0477657/proxmox-openid/src/lib.rs (L214)

and here:
https://github.com/ramosbugs/openidconnect-rs/blob/main/src/verification/mod.rs#L248

This was previously working, and only broke after the upgrade to Pocket ID 0.46.0.

Version and Environment

Pocket ID 0.46.0
Proxmox 8.4.1

Log Output

No response

*Originally created by @nervous-inhuman on 4/13/2025* ### Reproduction steps When trying to use PocketID with Proxmox, the login/auth flow is broken Repro: 1. Setup Proxmox as an OIDC Client 2. Configure Proxmox to use PocketID 3. Try to login 4. Fail ### Expected behavior User should get authenticated successfuly. ### Actual Behavior Configuration: ![Image](https://github.com/user-attachments/assets/e2182d1d-9991-41c2-ac09-9dab972e0e72) Error when trying to log-in using OIDC after configuration: ![Image](https://github.com/user-attachments/assets/a66f7ccc-7a77-453c-a0ad-7c200d20e0f7) From the Proxmox logs, you can see this error: ``` pvedaemon[280768]: openid authentication failure; rhost=<ip> msg=Failed to verify ID token: Unsupported: unexpected or unsupported JWT type `ID+JWT` ``` Which seems to come from here: https://github.com/proxmox/proxmox-rs/blob/57b0477657aa32b3b705f8a6399dbe1396da5db4/proxmox-openid/src/lib.rs#L214 and here: https://github.com/ramosbugs/openidconnect-rs/blob/main/src/verification/mod.rs#L248 This was previously working, and only broke after the upgrade to Pocket ID 0.46.0. ### Version and Environment Pocket ID 0.46.0 Proxmox 8.4.1 ### Log Output _No response_

AtHeartEngineer closed this issue

2025-07-08 08:43:40 -04:00

AtHeartEngineer added the bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug labels 2025-07-08 08:43:42 -04:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pocket-id#254