OICD broken #418

New Issue

MrUnknownDE · 2026-04-05T17:09:38+02:00

MrUnknownDE commented

2026-04-05 17:09:38 +02:00

Originally created by @Hawolex on 12/30/2025

Describe the Bug

The OICD with PocketID have worked before.
My ID work now with Nextcloud, Grafana, Proxmox, Gitea and Mail-Archiver. sp safe to say the PocketID session still works.

pangolin | Making OIDC URL generation request to: http://localhost:3000/api/v1/auth/idp/1/oidc/generate-url pangolin | Making OIDC callback validation request to: http://localhost:3000/api/v1/auth/idp/1/oidc/validate-callback pangolin | 2025-12-30T21:48:57+00:00 [error]: Unexpected token type: Number, value: NaN pangolin | Stack: ParserError: Unexpected token type: Number, value: NaN pangolin | at Parser.parse (/app/node_modules/jmespath/jmespath.js:513:27) pangolin | at Object.search (/app/node_modules/jmespath/jmespath.js:1664:25) pangolin | at validateOidcCallback (file:///app/dist/server.mjs:31211:34) pangolin | at process.processTicksAndRejections (node:internal/process/task_queues:103:5) {"name":"ParserError"}

This is the error i get in the logs

This worked before and if the user was not assigned an org they just got an empty profile.
The settings are set to provision the user.

The Callback have propagatet back to the OICD
https://TLD/auth/idp/2/oidc/callback

https://TLD/api/oidc/token
https://TLDauthorize

Have removed the OICD setup on both ends. Restared the stacks on both ends and configured the setup again, same result.

Any idea on where to look next or is this a breake in the last updates.
Tried roll back as far as i can bore i can`t start the stack. Did not solve it.

To take the whole Pangolin stack down for a reinstall in not an option atm.

Environment

Ubuntu 24.05 LTS
Docker `Client: Docker Engine - Community
Version: 29.1.3
API version: 1.52
Go version: go1.25.5
Git commit: f52814d
Built: Fri Dec 12 14:49:32 2025
OS/Arch: linux/amd64
Context: default

Server: Docker Engine - Community
Engine:
Version: 29.1.3
API version: 1.52 (minimum version 1.44)
Go version: go1.25.5
Git commit: fbf3ed2
Built: Fri Dec 12 14:49:32 2025
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: v2.2.1
GitCommit: dea7da592f5d1d2b7755e3a161be07f43fad8f75`

pangolin:1.14.1
gerbil:latest
traefik:latest

Newt v1.8.1

To Reproduce

Don`t know if anyone will get the same result with Pocket or any other OAuth2/OIDC setup

Expected Behavior

Expected the new user to be created and sign in.

*Originally created by @Hawolex on 12/30/2025* ### Describe the Bug The OICD with PocketID have worked before. My ID work now with Nextcloud, Grafana, Proxmox, Gitea and Mail-Archiver. sp safe to say the PocketID session still works. `pangolin | Making OIDC URL generation request to: http://localhost:3000/api/v1/auth/idp/1/oidc/generate-url pangolin | Making OIDC callback validation request to: http://localhost:3000/api/v1/auth/idp/1/oidc/validate-callback pangolin | 2025-12-30T21:48:57+00:00 [error]: Unexpected token type: Number, value: NaN pangolin | Stack: ParserError: Unexpected token type: Number, value: NaN pangolin | at Parser.parse (/app/node_modules/jmespath/jmespath.js:513:27) pangolin | at Object.search (/app/node_modules/jmespath/jmespath.js:1664:25) pangolin | at validateOidcCallback (file:///app/dist/server.mjs:31211:34) pangolin | at process.processTicksAndRejections (node:internal/process/task_queues:103:5) {"name":"ParserError"}` This is the error i get in the logs <img width="445" height="233" alt="Image" src="https://github.com/user-attachments/assets/ec2ff12c-cbe8-491a-b70f-e444f0320528" /> This worked before and if the user was not assigned an org they just got an empty profile. The settings are set to provision the user. The Callback have propagatet back to the OICD https://**TLD**/auth/idp/2/oidc/callback https://**TLD**/api/oidc/token https://**TLD**authorize Have removed the OICD setup on both ends. Restared the stacks on both ends and configured the setup again, same result. Any idea on where to look next or is this a breake in the last updates. Tried roll back as far as i can bore i can`t start the stack. Did not solve it. To take the whole Pangolin stack down for a reinstall in not an option atm. ### Environment Ubuntu 24.05 LTS Docker `Client: Docker Engine - Community Version: 29.1.3 API version: 1.52 Go version: go1.25.5 Git commit: f52814d Built: Fri Dec 12 14:49:32 2025 OS/Arch: linux/amd64 Context: default Server: Docker Engine - Community Engine: Version: 29.1.3 API version: 1.52 (minimum version 1.44) Go version: go1.25.5 Git commit: fbf3ed2 Built: Fri Dec 12 14:49:32 2025 OS/Arch: linux/amd64 Experimental: false containerd: Version: v2.2.1 GitCommit: dea7da592f5d1d2b7755e3a161be07f43fad8f75` pangolin:1.14.1 gerbil:latest traefik:latest Newt v1.8.1 ### To Reproduce Don`t know if anyone will get the same result with Pocket or any other OAuth2/OIDC setup ### Expected Behavior Expected the new user to be created and sign in.

MrUnknownDE closed this issue

2026-04-05 17:09:38 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#418