Frank
91d9864bb0
fix(observability): repair Grafana Authentik OAuth2 relying-party login
...
The Authentik SSO button returned "Server Error" (500) because the grafana
provider authorization_flow was NULL and the authorize view crashed building a
None flow planner. After that, the login failed with "InternalError": no email
claim reached Grafana, so it fell back to GET <api_url>/emails, which authentik
404s.
Unit env: request authentik real scopes (openid email profile, not the GitLab
user:email that crashes the authorize view); read claims from the id_token
(USE_ID_TOKEN=true) and drop ?api=1 from the API URL (Grafana v13 turns it into
a /emails 404); pin email/sub/preferred_username attribute paths; allow
first-login provisioning since the Anubis->Authentik guard fronts the callback.
scripts/authentik-grafana-sso-fix.sh idempotently re-applies the two IdP-side
causes (NULL authorization_flow; the grafana-email-scope mapping that returned
a bare string instead of {"email":..}). Verified end to end: RP login lands on /
and /api/user answers 200 with the real email, user provisioned as Viewer.
2026-10-20 20:40:15 -07:00
..
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-06 22:41:18 -07:00
2026-10-20 20:40:15 -07:00
2026-10-20 16:55:44 -07:00
2026-10-10 17:03:14 -07:00
2026-10-19 10:18:24 -07:00
2026-10-19 10:56:37 -07:00
2026-10-17 22:18:00 -07:00
2026-08-28 02:20:06 -07:00
2026-09-16 21:43:09 -07:00
2026-09-20 17:51:27 -07:00
2026-10-10 17:03:14 -07:00
2026-09-16 06:59:44 -07:00
2026-10-09 16:47:19 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-09-16 15:38:20 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-09-21 18:56:35 -07:00
2026-09-20 15:25:09 -07:00
2026-10-10 17:03:14 -07:00
2026-10-18 17:18:21 -07:00
2026-10-09 16:47:19 -07:00
2026-10-17 22:18:00 -07:00
2026-10-19 10:17:52 -07:00
2026-10-19 04:54:06 -07:00
2026-10-07 21:31:10 -07:00
2026-09-20 15:25:09 -07:00
2026-10-10 17:03:14 -07:00
2026-10-09 16:47:19 -07:00
2026-08-25 20:13:33 -07:00
2026-08-25 20:13:33 -07:00
2026-10-19 21:22:50 -07:00
2026-10-20 19:50:15 -07:00
2026-08-25 20:13:33 -07:00
2026-10-18 17:43:08 -07:00
2026-10-06 21:42:16 -07:00
2026-10-19 10:56:37 -07:00
2026-10-15 04:10:50 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-19 21:42:31 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-10 17:03:14 -07:00
2026-10-17 21:02:16 -07:00
2026-10-10 17:03:14 -07:00
2026-10-18 17:26:50 -07:00
2026-10-18 13:50:19 -07:00
2026-10-17 19:40:56 -07:00
2026-10-18 13:15:18 -07:00
2026-10-19 14:42:56 -07:00
2026-10-10 17:03:14 -07:00
2026-09-26 19:51:57 -07:00
2026-10-09 16:47:19 -07:00
2026-10-10 17:03:14 -07:00
2026-10-19 11:07:11 -07:00
2026-10-15 04:10:50 -07:00
2026-10-19 21:42:31 -07:00
2026-10-18 03:05:09 -07:00
2026-10-19 14:26:58 -07:00
2026-10-20 18:11:40 -07:00
2026-10-19 14:42:56 -07:00
2026-10-19 14:47:30 -07:00
2026-10-19 10:56:37 -07:00
2026-08-28 02:20:06 -07:00
2026-09-26 15:23:24 -07:00
2026-09-26 22:50:17 -07:00
2026-10-05 23:26:51 -07:00
2026-09-21 13:20:15 -07:00
2026-08-23 12:59:56 -07:00
2026-08-23 12:59:56 -07:00
2026-10-10 17:03:14 -07:00
2026-10-07 02:45:28 -07:00
2026-10-10 17:03:14 -07:00
2026-08-25 15:38:57 -07:00
2026-10-19 16:22:38 -07:00
2026-10-19 10:17:52 -07:00
2026-10-13 20:51:32 -07:00
2026-10-05 23:26:51 -07:00
2026-09-26 19:25:46 -07:00
2026-10-19 10:56:37 -07:00
2026-10-19 10:56:37 -07:00
2026-10-10 17:03:14 -07:00
2026-09-26 23:25:55 -07:00
2026-10-19 15:02:01 -07:00
2026-10-19 22:35:06 -07:00
2026-10-19 14:42:56 -07:00
2026-10-18 01:24:03 -07:00
2026-09-17 18:38:54 -07:00
2026-09-17 13:09:59 -07:00
2026-10-06 00:21:40 -07:00
2026-10-18 01:34:17 -07:00
2026-10-18 17:44:31 -07:00
2026-08-25 17:04:15 -07:00
2026-10-17 22:18:00 -07:00
2026-10-13 19:20:33 -07:00
2026-10-06 20:41:33 -07:00
2026-10-18 17:18:30 -07:00