Missing 'state' parameter when using OpenID Connect with Authelia about django-allauth HOT 4 OPEN

Hi, since authelia works for me when using oidc (in Paperless-ngx), what is the version and general setup of Authelia you are using and what is the version of allauth the app is using?

from django-allauth.

Hi, since authelia works for me when using oidc (in Paperless-ngx), what is the version and general setup of Authelia you are using and what is the version of allauth the app is using?

Hi, the authelia version i'm using is v4.37.5 and the app is glitchtip v3.4.6. Sorry i'm not familiar with python so i don't know how to check the allauth version that glitchtip using.

The configuration i'm using is:

"settings": {
"server_url": "https://auth.example.com/.well-known/openid-configuration"
}

from django-allauth.

Me neither unfortunately, but checking their respository I found something that looks promising: https://gitlab.com/glitchtip/glitchtip-backend/-/blob/ef3b24304cb37c1d6ee9ff915005c7c2430090dc/pyproject.toml#L12 for me it looks like they are using almost the latest version. Maybe @pennersr can tell us if the latest version of allauth contains a fix that might explain this, since the version for Authelia worked for me.

@jim-kirisame maybe you can double check that your config looks like the example config that worked for me: https://github.com/pennersr/django-allauth/blob/a0fe9ec0303d6f18e37ac2641589cf94f335c3d4/docs/socialaccount/providers/authelia.rst

from django-allauth.

@noantiq I have read your document, but glitchip use a web based editor to change these configuration so the config may not exactly the same. I have double checked the client_id, secret and server_url, they are all correct since the login page can successfully redirect to my authelia site and then back to glitchip with a missing state error.

Can you try to login with allauth and check if the request url to authelia contains a 'state' query parameter? There is no such parameter in my login flow so i think that might be a allauth bug.

from django-allauth.