Oauth2-proxy: Not working with Rundeck?

[dennisbrouwer91]

Hi,

I'm trying to setup oauth2_proxy in front of Rundeck, as described on their documentation you can use the preauthentication https://docs.rundeck.com/docs/administration/security/authentication.html#preauthenticated-mode-using-headers

Login through Okta is working as expected and in the oauth2_proxy logs i can see i'm logged in. But for some reason Rundeck is redirecting me to the /user/login form again.
Anyone here has any expierence with Rundeck + oauth2_proxy?

[dcarrion87]

I'm currently working through this at the moment too. Samples out there just do not work. Will drop notes back here as I figure it out.

[github-actions[bot]]

This issue has been inactive for 60 days. If the issue is still relevant please comment to re-activate the issue. If no action is taken within 7 days, the issue will be marked closed.

[rnsc]

hello @dcarrion87 , had any luck with your integration?

[leshik]

I posted my solution here: https://github.com/rundeck/rundeck/issues/5656#issuecomment-621059856

[danifr]

I think OP config might be wrong. Hard to know from the original message.
Anyway, what I am experiencing is, authentication works fine BUT roles are not passed correctly.

Therefore Rundeck gives you this error:

I believe this is a Rundeck bug and not a oauth2_proxy one.

[leshik]

Rundeck works fine if you pass correct headers. I'd suggest putting httpbin behind the oauth2-proxy instead of rundeck, then examining headers.

[github-actions[bot]]

This issue has been inactive for 60 days. If the issue is still relevant please comment to re-activate the issue. If no action is taken within 7 days, the issue will be marked closed.