BrowZer 0.90.0 with External Authentik OIDC - invalid_grant Error During Token Exchange

BrowZer
1

We successfully use Authentik as OIDC provider
Bootstrapper correctly reads and embeds config
But fails with: invalid_grant - does not match redirection URI or was issued to another client
Error occurs in oidcUtil.getAccessToken() during token exchange
The bootstrapper is trying to exchange the auth code server-side

Is BrowZer 0.90.0 designed to work with external OIDC providers?

Should the bootstrapper do server-side token exchange, or should that be browser-side?

What's the correct configuration for using an external provider like Authentik?

2

Hi @vox100, welcome to the community and to OpenZiti!

Unfortunately we had to pause work on BrowZer. It should most work with any OIDC provider. "But fails with: invalid_grant - does not match redirection URI or was issued to another client" makes me think it was misconfigured. Unfortunately, we aren't really in a place to continue supporting it at this time.

You could have a look into zrok to see if that might fit your needs. Cheers