Hi,

I ‘ve a Centreon server 21.10.10 (Centos) wich work fine with Google Oauth2.

I am moving to Centreon 22.10.1 (Debian) but OpenID connection is broken.

The authorization code is sent by Google but Centreon give me a “Request for connection token to external provider has failed”

Any help are welcome !

here is an example of the OauthFlows :

{
   Explanation: "GET from ORIGINATOR(previous page) => REDIRECTURL(Current page)",
   date: "2022-11-17T06:50:41.376Z",
   page: "page_1",
   originator: "https://accounts.google.com//o/oauth2/v2/auth?client_id=123123123123-xxxxxxxxxxxxxxxxxxxxxxxxxxx.apps.googleusercontent.com&response_type=code&redirect_uri=https://supervision._____.org/centreon/authentication/providers/configurations/openid&state=6375d9b97beaf&scope=email",
   redirectURL: {
      baseURL: "https://supervision._____.org/centreon/authentication/providers/configurations/openid...",
      state: "6375d9b97beaf",
      code: "4/xXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX_xXxXxXxXx-xXxXxXxXxXxXxXxXxX",
      scope: "email https://www.googleapis.com/auth/userinfo.email openid",
      authuser: "0",
      hd: "eigsi.fr",
      prompt: "none"
   },
   postData: "No POST"
}
{
   Explanation: "GET from ORIGINATOR(previous page) => REDIRECTURL(Current page)",
   date: "2022-11-17T06:50:41.754Z",
   page: "page_1",
   originator: "https://supervision._____.org/centreon/authentication/providers/configurations/openid?state=6375d9b97beaf&code=4%2FxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX_xXxXxXxXx-xXxXxXxXxXxXxXxXxX&scope=email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+openid&authuser=0&hd=eigsi.fr&prompt=none",
   redirectURL: {
      baseURL: "https://supervision._____.org/centreon/login?authenticationError=Request for connecti...",
      authenticationError: "Request for connection token to external provider has failed"
   },
   postData: "No POST"
}

the login.log contain :

2022-11-17 06:50:41|-1|0|0|TOpenid]

Here is my config :

Token endpoint, introspection ans user information are not under https://accounts.google.com,

I hope his is not a problem ?