OIDC reauthentication hangs #608

Closed
opened 2025-12-29 02:21:09 +01:00 by adam · 2 comments
Owner

Originally created by @redstonekasi on GitHub (Jan 3, 2024).

Bug description

When re-authenticating with an OIDC provider, the login never succeeds and instead infinitely hangs.

Environment

  • OS: Arch Linux
  • Headscale version: 0.23.0-alpha2
  • Tailscale version: 1.56.1
  • Headscale is behind a (reverse) proxy
  • Headscale runs in a container

To Reproduce

  1. Setup a headscale instance using the mock OIDC server.
  2. Login with tailscale.
  3. Logout with tailscale.
  4. Login with tailscale, watch it break.
Originally created by @redstonekasi on GitHub (Jan 3, 2024). <!-- Before posting a bug report, discuss the behaviour you are expecting with the Discord community to make sure that it is truly a bug. The issue tracker is not the place to ask for support or how to set up Headscale. Bug reports without the sufficient information will be closed. Headscale is a multinational community across the globe. Our language is English. All bug reports needs to be in English. --> ## Bug description <!-- A clear and concise description of what the bug is. Describe the expected bahavior and how it is currently different. If you are unsure if it is a bug, consider discussing it on our Discord server first. --> When re-authenticating with an OIDC provider, the login never succeeds and instead infinitely hangs. ## Environment <!-- Please add relevant information about your system. For example: - Version of headscale used - Version of tailscale client - OS (e.g. Linux, Mac, Cygwin, WSL, etc.) and version - Kernel version - The relevant config parameters you used - Log output --> - OS: Arch Linux - Headscale version: 0.23.0-alpha2 - Tailscale version: 1.56.1 <!-- We do not support running Headscale in a container nor behind a (reverse) proxy. If either of these are true for your environment, ask the community in Discord instead of filing a bug report. --> - [ ] Headscale is behind a (reverse) proxy - [ ] Headscale runs in a container ## To Reproduce 1. Setup a headscale instance using the mock OIDC server. 2. Login with tailscale. 3. Logout with tailscale. 4. Login with tailscale, watch it break. <!-- Steps to reproduce the behavior. -->
adam added the bug label 2025-12-29 02:21:09 +01:00
adam closed this issue 2025-12-29 02:21:09 +01:00
Author
Owner

@Etran-H commented on GitHub (Jan 10, 2024):

https://github.com/juanfont/headscale/blob/3b103280efb78f4d705ec5ab6e96a6e37cd30231/hscontrol/oidc.go#L446C3-L446C3
#1609
Only the Machine key is determined, the Node key may be different

@Etran-H commented on GitHub (Jan 10, 2024): [https://github.com/juanfont/headscale/blob/3b103280efb78f4d705ec5ab6e96a6e37cd30231/hscontrol/oidc.go#L446C3-L446C3](url) #1609 Only the Machine key is determined, the Node key may be different
Author
Owner

@mhahl commented on GitHub (Jan 12, 2024):

Can confirm. Replicated with version headscale/headscale:0.23.0-alpha2 running on Fedora with Tailscale 1.56.1

@mhahl commented on GitHub (Jan 12, 2024): Can confirm. Replicated with version `headscale/headscale:0.23.0-alpha2` running on Fedora with `Tailscale 1.56.1`
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#608