-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
quay-v3.16.0
-
False
-
-
False
-
-
Description:
This is an issue found in Quay 3.16.0 OIDC PKCE Support, the issue is with invalid PKCE configurations, Quay App can start successfully, and users can only see this issue when login with Quay, pls review this issue.
- Invalid PKCE_METHOD not detected until user login attempt
- No startup check for USE_PKCE + PUBLIC_CLIENT combinations
Quay: 3.16.0
Example of invalid OIDC PKCE Configurations:
REDHATSSO_LOGIN_CONFIG: CLIENT_ID: quay CLIENT_SECRET: ***** OIDC_SERVER: https://sso-redhatsso.apps.quaytest-15413.qe.devcluster.openshift.com/auth/realms/quay/ PREFERRED_GROUP_CLAIM_NAME: groupNames LOGIN_SCOPES: [ 'openid', 'roles' ] USE_PKCE: true PKCE_METHOD: "s299" SERVICE_NAME: redhatsso