Gettting Issuer.discover(error) using express-openid-connect

konrad.sopala · May 17, 2023, 1:01pm

Problem statement

Users are getting Issuer.discover(error) using express-openid-connect

Solution

In order to handle that you need to update some references as below:

"resolutions": {
    "agent-base": "^6.0.1"
  },

Authorization code flow results in "connect ECONNREFUSED 127.0.0.1:443"

opened 07:17PM - 11 Nov 20 UTC

closed 09:52PM - 12 Nov 20 UTC

halestock

### Description Hello, I am currently in the process of testing the upgrade p…ath to 2.0.0 of this library using Auth0 as my oauth provider. After logging in to Auth0, the callback endpoint fails with the following error: ```BadRequestError: connect ECONNREFUSED 127.0.0.1:443 at /Users/hsostock/code/connect-web/node_modules/express-openid-connect/middleware/auth.js:105:31 at processTicksAndRejections (internal/process/task_queues.js:97:5)``` **Note:** After doing some debugging, it appears that this is the result of an internal call to `https://{auth0-domain}/.well-known/oauth-authorization-server` returning a `404 Not Found` error (which, for some reason, is surfaced as the above connection refused error). ### Reproduction I am using the following configuration in my express app: ```typescript const app = express(); app.use(oidc.auth({ secret: "secret value", routes: { login: '/auth/login', logout: '/auth/logout', postLogoutRedirect: '/', callback: '/auth/callback', }, session: { rolling: false, absoluteDuration: 60, // 60 seconds }, authRequired: true, auth0Logout: true, clientID: "secret value", clientSecret: "secret value", baseURL: config.webUrl, issuerBaseURL: config.auth.issuerBaseURL, authorizationParams: { scope: 'openid profile email offline_access', response_type: 'code', }, })); ``` And occurs consistently (as mentioned) when validating the authorization code returned from Auth0. ### Environment - **Version of this library used:** 2.0.0 - **Version of the platform or framework used, if applicable:** Express 4.17.1 - **Other relevant versions (language, server software, OS, browser):** Node.js 12.13.1 / Typescript / Chrome

Topic		Replies	Views
Express-openid-connect response_type: code = 400 access_denied Help	1	1919	June 15, 2022
"Unable to issue redirect for OAuth 2.0 transaction" error logs Help classic-universal-login-experience , login-experience	0	955	March 6, 2023
"Service not found" Error With Client ID Help oidc , login	7	15928	July 26, 2019
Node.js Connection Refused Help auth0 , api	3	16251	September 21, 2020
Nonce mismatch in OpenID Connect Enterprise Connections Help oidc	4	6367	December 7, 2019

Gettting Issuer.discover(error) using express-openid-connect

Problem statement

Solution

Related Topics