Oauth2 Authentication not working

[naveen8384]

I configured oauth2 authentication but after logging in successfully again it is redirecting to login page. This is the configuration I am using.

   `micronaut:
        oauth2:
          enabled: true
          clients:
            oauth:
              client-id: "<client-id>"
              client-secret: "<secret>"
              openid:
                issuer: "<issuer>"
    akhq:
      security:
        default-group: no-roles
        oidc:
          enabled: true
          providers:
            oauth:
              label: "Login with SSO"
              username-field: email
              groups-field: roles
              default-group: topic-reader`

In API request for /me I see logged as true and username is null. Am I missing anything?

[tchiotludo]

Here is a working with google OIDC :

micronaut:
  security:
    enabled: true
      oauth2:
        enabled: true
        clients:
          oauth:
            client-id: "<client-id>"
            client-secret: "<secret>"
            openid:
              issuer: "<issuer>"
akhq:
  security:
    default-group: no-roles
    oidc:
      enabled: true
      providers:
        google:
          label: "Login with Google"
          username-field: email
          default-group: reader
          users:
            - username: [email protected]
              groups:
                - admin

I think your username-field is wrong and you should map to correct one.

You can enable more debug output with configuration below to find the right field :

logger:
  levels:
    io.micronaut.security: TRACE
    org.akhq.configs: TRACE

[naveen8384]

Hi @tchiotludo, I found that groups is missing in scope. If we add groups in scope then oauth is returning groups for that user. Is there anyway we can provide scopes explicitly?

company.com/oauth/restv1/authorize?scope=openid+email+profile&response_type=code=

[tchiotludo]

Seems that there is configuration here

[naveen8384]

Thanks @tchiotludo ,
This configuration worked.

      oauth2:
          enabled: true
          clients:
            oauth:
              client-id: "<client-id>"
              client-secret: "<secret>"
              scopes: 
                - email
                - openid
                - groups
                - profile              
              openid:
                issuer: "<issuer>"