I’m trying to install ocis in docker with my own keycloak (also in docker, that was installed before) and nginx.
I get an error when logging in
Login Error
Your user session is invalid or has expired.
If you like to login with a different user please proceed to exit.
Attention: this will log you out from all applications you are running in this browser with your current user.
And in docker log
{“error”:“invalid_token”,“error_description”:“Token verification failed”}
My yml
version: “3.7”
services:
ocis:
image: owncloud/ocis:latest
networks:
ocis_net:
entrypoint:
- /bin/sh
- /entrypoint-override.sh
environment:
# Keycloak IDP specific configuration
PROXY_AUTOPROVISION_ACCOUNTS: “true”
PROXY_OIDC_ISSUER: https://keycloak.mydomain.com/auth/realms/myrealm
WEB_OIDC_AUTHORITY: https://keycloak.mydomain.com/auth/realms/myrealmWEB_OIDC_CLIENT_ID: ocis WEB_OIDC_METADATA_URL: https://keycloak.mydomain.com/auth/realms/myrealm/.well-known/openid-configuration STORAGE_OIDC_ISSUER: https://keycloak.mydomain.com/auth/realms/myrealm STORAGE_LDAP_IDP: https://keycloak.mydomain.com/auth/realms/myralm # general config OCIS_URL: https://myocis.mydomain.com OCIS_LOG_LEVEL: ${OCIS_LOG_LEVEL:-error} # make oCIS less verbose PROXY_TLS: "false" # do not use SSL between Traefik and oCIS ACCOUNTS_DEMO_USERS_AND_GROUPS: "false" # don't generate demo users # change default secrets IDP_LDAP_BIND_PASSWORD: ************* STORAGE_LDAP_BIND_PASSWORD: ******************************** OCIS_JWT_SECRET: ******************************** STORAGE_TRANSFER_SECRET: ********************************* OCIS_MACHINE_AUTH_API_KEY: ********************************* OCIS_INSECURE: "false" volumes: - ./config/ocis/entrypoint-override.sh:/entrypoint-override.sh - ocis-data:/var/lib/ocis ports: - "9200:9200"networks:
ocis_net:
Apparently, the problem is in ISS, i’m was trying to change “PROXY_OIDC_ISSUER” to localhost, but but it did not help.
