Simon Erhardt

I also have this problem with Sensei LMS 3.11.0. It seems that the template does not handle taxonomy templates. See: https://github.com/elementor/hello-theme/blob/master/index.php#L33 It was also mentioned in the Plugin forum: https://wordpress.org/support/topic/problem-with-sensei-and-elementor-hello/...

It's still happening on 2024.8.3. ``` "error":"oidc: id token issued by a different provider, expected \"http://my-authentik.security.svc.cluster.local/application/o/my-app/\" got \"https://authentik.my-domain.com/application/o/my-app/\"","event":"failed to redeem code","level":"warning","logger":"authentik.outpost.proxyv2.application" ```

There is a workaround of using the external authentik URL as AUTHENTIK_HOST instead of the internal one. This works but will have other implications, as example now the whole internal...

So i did a bit analysing. The issue seems to happen in line 59 of [/internal/outpost/proxyv2/application/oauth_callback.go](https://github.com/goauthentik/authentik/blob/b57df12ace583526ab46752a3bd914996f3abd1a/internal/outpost/proxyv2/application/oauth_callback.go#L59). When the token is verified the context has "AUTHENTIK_HOST" as issuer and not "AUTHENTIK_HOST_BROWSER"...

I also stumbled over this bug. But he already has a Keras 3-compatible version in his repo, it's just not documented. I think they should just update the documentation. Just...

I seem to have a related issue. App Login is not possible with SSO. I get the error, that the server has an invalid version.

Yes, i will take a look into it!

@luukrijnbende Hmm, that actually makes no sense to me. Because your token should be created by the external URL and not with the internal one. For me it looks like...

This really sounds like header issues. Because my setup is mostly the same like yours. The only difference I see is that I use nginx-ingress. Which then is made available...

@yodaldevoid Just to make it sure. I don't have any errors anymore after the release of this pull-request. With the patch I did Authentik now works as excepted. This pull-request...