Skip to content

Infinite loop redirection with NGINX forward auth and multiple outpost replicas #6883

New issue
New issue
Closed as not planned
Closed as not planned
Infinite loop redirection with NGINX forward auth and multiple outpost replicas#6883
Labels
bugSomething isn't workinglegacy/wontfix
@xunleii

Description

@xunleii
xunleii
opened on Sep 13, 2023

Describe the bug
This issue dupplicates #5674; if you configure Kubernetes' NGINX ingress (forward-auth) and use several outpost replicas, you get a redirection loop.

To Reproduce
To make this as simple a possible, I made a repository with everything to reproduce this issue: https://github.com/xunleii/authentik-outpost-issues-demo/.

TLDR; simply install nginx-ingress and Authentik on Kubernetes, configure several replica outposts and try it out with an application.

Expected behavior
No redirection/authentication loop when I use multiple Authentik outposts with NGINX proxy.

Version and Deployment (please complete the following information):

  • Authentik version: 2023.8.2
  • Deployment: helm

Logs

The format is <pod> <container> <log>

Authentik proxy logs (3 pods) 
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Loaded config","level":"debug","path":"inbuilt-default","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Loaded config from environment","level":"debug","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"not enabling debug server, set `AUTHENTIK_DEBUG` to `true` to enable it.","level":"info","logger":"authentik.go_debugger","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Starting Metrics server","level":"info","listen":"0.0.0.0:9300","logger":"authentik.outpost.metrics","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Starting HTTP server","level":"info","listen":"0.0.0.0:9000","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Starting HTTPS server","level":"info","listen":"0.0.0.0:9443","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Loaded config","level":"debug","path":"inbuilt-default","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Loaded config from environment","level":"debug","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"env":"k8s","event":"Error reporting enabled","level":"debug","logger":"authentik.outpost","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Starting authentik outpost","hash":"tagged","level":"info","logger":"authentik.outpost","timestamp":"2023-09-13T16:13:07Z","version":"2023.8.2"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"dir":"/tmp","event":"using filesystem session backend","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"Swapped maps","level":"debug","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"not enabling debug server, set `AUTHENTIK_DEBUG` to `true` to enable it.","level":"info","logger":"authentik.go_debugger","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Starting Metrics server","level":"info","listen":"0.0.0.0:9300","logger":"authentik.outpost.metrics","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Starting HTTPS server","level":"info","listen":"0.0.0.0:9443","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Starting HTTP server","level":"info","listen":"0.0.0.0:9000","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"env":"k8s","event":"Error reporting enabled","level":"debug","logger":"authentik.outpost","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Starting authentik outpost","hash":"tagged","level":"info","logger":"authentik.outpost","timestamp":"2023-09-13T16:13:07Z","version":"2023.8.2"}
ak-outpost-default-8598cd8789-qrf94 proxy {"dir":"/tmp","event":"using filesystem session backend","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"Swapped maps","level":"debug","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:17Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:17Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Loaded config","level":"debug","path":"inbuilt-default","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Loaded config from environment","level":"debug","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"not enabling debug server, set `AUTHENTIK_DEBUG` to `true` to enable it.","level":"info","logger":"authentik.go_debugger","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Starting Metrics server","level":"info","listen":"0.0.0.0:9300","logger":"authentik.outpost.metrics","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Starting HTTPS server","level":"info","listen":"0.0.0.0:9443","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Starting HTTP server","level":"info","listen":"0.0.0.0:9000","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"env":"k8s","event":"Error reporting enabled","level":"debug","logger":"authentik.outpost","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Starting authentik outpost","hash":"tagged","level":"info","logger":"authentik.outpost","timestamp":"2023-09-13T16:13:07Z","version":"2023.8.2"}
ak-outpost-default-8598cd8789-prkgh proxy {"dir":"/tmp","event":"using filesystem session backend","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"Swapped maps","level":"debug","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:07Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:17Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"tracing headers for debug","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["fr-FR,fr;q=0.9"],"Cache-Control":["max-age=0"],"Connection":["close"],"Cookie":["authentik_proxy_xa3sH6eM=MTY5NDYyMTM5N3xOd3dBTkRKSldrSlhWMHBhU2tZMFMxQklSRVJHU0VsS1FsUklSVlpWU1VKRVIwMHlUVlZXTjB0WFFVMVlUa2MyV0VsS1VVbEJSVkU9fNw5BH84S5Ggq8HSG3Amx_JRbohZNaHUtXxO6nlq0AQs"],"Sec-Ch-Ua":["\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\""],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Site":["cross-site"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Auth-Request-Redirect":["/"],"X-Forwarded-For":["10.42.2.0"],"X-Forwarded-Host":["debug.127-0-0-1.nip.io"],"X-Original-Method":["GET"],"X-Original-Url":["https://debug.127-0-0-1.nip.io/"],"X-Real-Ip":["10.42.2.0"],"X-Request-Id":["b3f1b3d167b26695866040f92ce4ad9e"],"X-Sent-From":["nginx-ingress-controller"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"nginx forwarded url","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:24Z","url":"https://debug.127-0-0-1.nip.io/"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"/outpost.goauthentik.io/auth/nginx","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:41746","runtime":"0.465","scheme":"http","size":21,"status":401,"timestamp":"2023-09-13T16:13:24Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"redirect URI did not contain external host","ext":"//debug.127-0-0-1.nip.io","level":"warning","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:24Z","url":"/"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:24Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/start?rd=%2F","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"0.484","scheme":"http","size":384,"status":302,"timestamp":"2023-09-13T16:13:24Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"handling OAuth Callback from querystring signature","level":"debug","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"tracing states","expected":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","states":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"id_token","id_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwOi8vYXV0aGVudGlrLmF1dGhlbnRpay5zdmMuY2x1c3Rlci5sb2NhbC9hcHBsaWNhdGlvbi9vL2RlYnVnLyIsInN1YiI6ImY2ZTU4OGFhYTVmY2Q1OTU0NzMzOTBjZWZhN2RiZDRmMTFlYmNjNjE5NjBkNGIwYmM4YzcxMmNkYzJiMzlmZmEiLCJhdWQiOiJ4YTNzSDZlTUREbkhCZEdTWmFrNENqekxkV3FkTlZ5djZldVh0WGJIIiwiZXhwIjoxNjk3MjEzNjA1LCJpYXQiOjE2OTQ2MjE2MDUsImF1dGhfdGltZSI6MTY5NDYyMDk3OCwiYWNyIjoiZ29hdXRoZW50aWsuaW8vcHJvdmlkZXJzL29hdXRoMi9kZWZhdWx0IiwiYXRfaGFzaCI6ImRua1o0Wk94S0dUX1lwOS12eGVCYmciLCJha19wcm94eSI6eyJ1c2VyX2F0dHJpYnV0ZXMiOnt9LCJpc19zdXBlcnVzZXIiOnRydWV9LCJlbWFpbCI6InJvb3RAZXhhbXBsZS5jb20iLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwibmFtZSI6ImF1dGhlbnRpayBEZWZhdWx0IEFkbWluIiwiZ2l2ZW5fbmFtZSI6ImF1dGhlbnRpayBEZWZhdWx0IEFkbWluIiwicHJlZmVycmVkX3VzZXJuYW1lIjoiYWthZG1pbiIsIm5pY2tuYW1lIjoiYWthZG1pbiIsImdyb3VwcyI6WyJhdXRoZW50aWsgQWRtaW5zIl19._R6PNjCq6mF-A2BnLwi_XJNpJwR-lFFxFhAKkpWShXI","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"final redirect","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","redirect":"http://debug.127-0-0-1.nip.io","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/callback?X-authentik-auth-callback=true&code=e3da5d0eb0bd4fc884cf2ab37332f093&state=I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"75.338","scheme":"http","size":52,"status":302,"timestamp":"2023-09-13T16:13:25Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"tracing headers for debug","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["fr-FR,fr;q=0.9"],"Connection":["close"],"Cookie":["authentik_proxy_xa3sH6eM=MTY5NDYyMTYwNXxOd3dBTkRKSldrSlhWMHBhU2tZMFMxQklSRVJHU0VsS1FsUklSVlpWU1VKRVIwMHlUVlZXTjB0WFFVMVlUa2MyV0VsS1VVbEJSVkU9fLTHbaRNTbZy0syJHPJ0gsid4IsNtslp7wHgmNsxsnWD"],"Sec-Ch-Ua":["\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\""],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Site":["cross-site"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Auth-Request-Redirect":["/"],"X-Forwarded-For":["10.42.2.0"],"X-Forwarded-Host":["debug.127-0-0-1.nip.io"],"X-Original-Method":["GET"],"X-Original-Url":["https://debug.127-0-0-1.nip.io/"],"X-Real-Ip":["10.42.2.0"],"X-Request-Id":["6ffde29df877d668efe2f6f0d002ebe0"],"X-Sent-From":["nginx-ingress-controller"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"nginx forwarded url","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:25Z","url":"https://debug.127-0-0-1.nip.io/"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"/outpost.goauthentik.io/auth/nginx","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:41762","runtime":"0.502","scheme":"http","size":21,"status":401,"timestamp":"2023-09-13T16:13:25Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"session already has state, sending redirect to current state","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:25Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/start?rd=%2F","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"0.251","scheme":"http","size":384,"status":302,"timestamp":"2023-09-13T16:13:25Z","user":"akadmin","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"handling OAuth Callback from querystring signature","level":"debug","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"tracing states","expected":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","states":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"id_token","id_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.I33_Eb-dHTtsRZTDe7waEbtxE2e1snWegO2BkYnHArw","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"final redirect","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","redirect":"http://debug.127-0-0-1.nip.io","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/callback?X-authentik-auth-callback=true&code=5bab90ae898747d988a336509048734c&state=I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"68.553","scheme":"http","size":52,"status":302,"timestamp":"2023-09-13T16:13:26Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"tracing headers for debug","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["fr-FR,fr;q=0.9"],"Connection":["close"],"Cookie":["authentik_proxy_xa3sH6eM=MTY5NDYyMTYwNnxOd3dBTkRKSldrSlhWMHBhU2tZMFMxQklSRVJHU0VsS1FsUklSVlpWU1VKRVIwMHlUVlZXTjB0WFFVMVlUa2MyV0VsS1VVbEJSVkU9fP0uvKpULgQBh3B2btdNthlFLvmrefutPgstwzc5yOxz"],"Sec-Ch-Ua":["\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\""],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Site":["cross-site"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Auth-Request-Redirect":["/"],"X-Forwarded-For":["10.42.2.0"],"X-Forwarded-Host":["debug.127-0-0-1.nip.io"],"X-Original-Method":["GET"],"X-Original-Url":["https://debug.127-0-0-1.nip.io/"],"X-Real-Ip":["10.42.2.0"],"X-Request-Id":["f4efba0b0592c66e2c3a38693da240ab"],"X-Sent-From":["nginx-ingress-controller"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"nginx forwarded url","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:26Z","url":"https://debug.127-0-0-1.nip.io/"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"/outpost.goauthentik.io/auth/nginx","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40500","runtime":"0.224","scheme":"http","size":21,"status":401,"timestamp":"2023-09-13T16:13:26Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"session already has state, sending redirect to current state","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:26Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/start?rd=%2F","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"0.368","scheme":"http","size":384,"status":302,"timestamp":"2023-09-13T16:13:26Z","user":"akadmin","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"handling OAuth Callback from querystring signature","level":"debug","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"tracing states","expected":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","states":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"id_token","id_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.a_4yYWTKB9m95uK5ZvT_v13ytzf3Ze9EvWn05UFsgO8","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"final redirect","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","redirect":"http://debug.127-0-0-1.nip.io","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/callback?X-authentik-auth-callback=true&code=7f0d7f83ee974544a457743889af025a&state=I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"64.926","scheme":"http","size":52,"status":302,"timestamp":"2023-09-13T16:13:27Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"tracing headers for debug","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["fr-FR,fr;q=0.9"],"Connection":["close"],"Cookie":["authentik_proxy_xa3sH6eM=MTY5NDYyMTYwN3xOd3dBTkRKSldrSlhWMHBhU2tZMFMxQklSRVJHU0VsS1FsUklSVlpWU1VKRVIwMHlUVlZXTjB0WFFVMVlUa2MyV0VsS1VVbEJSVkU9fKFBBzUJ02wWdA3Bwx-CvCNGhxwOO3ha-9RKG0WcTrCY"],"Sec-Ch-Ua":["\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\""],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Site":["cross-site"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Auth-Request-Redirect":["/"],"X-Forwarded-For":["10.42.2.0"],"X-Forwarded-Host":["debug.127-0-0-1.nip.io"],"X-Original-Method":["GET"],"X-Original-Url":["https://debug.127-0-0-1.nip.io/"],"X-Real-Ip":["10.42.2.0"],"X-Request-Id":["33bd842e1838b89f724382b4b7f95f27"],"X-Sent-From":["nginx-ingress-controller"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"nginx forwarded url","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:27Z","url":"https://debug.127-0-0-1.nip.io/"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"/outpost.goauthentik.io/auth/nginx","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40514","runtime":"0.178","scheme":"http","size":21,"status":401,"timestamp":"2023-09-13T16:13:27Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"session already has state, sending redirect to current state","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/start?rd=%2F","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"0.227","scheme":"http","size":384,"status":302,"timestamp":"2023-09-13T16:13:27Z","user":"akadmin","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:27Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"handling OAuth Callback from querystring signature","level":"debug","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"tracing states","expected":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","states":"I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"id_token","id_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwOi8vYXV0aGVudGlrLmF1dGhlbnRpay5zdmMuY2x1c3Rlci5sb2NhbC9hcHBsaWNhdGlvbi9vL2RlYnVnLyIsInN1YiI6ImY2ZTU4OGFhYTVmY2Q1OTU0NzMzOTBjZWZhN2RiZDRmMTFlYmNjNjE5NjBkNGIwYmM4YzcxMmNkYzJiMzlmZmEiLCJhdWQiOiJ4YTNzSDZlTUREbkhCZEdTWmFrNENqekxkV3FkTlZ5djZldVh0WGJIIiwiZXhwIjoxNjk3MjEzNjA4LCJpYXQiOjE2OTQ2MjE2MDgsImF1dGhfdGltZSI6MTY5NDYyMDk3OCwiYWNyIjoiZ29hdXRoZW50aWsuaW8vcHJvdmlkZXJzL29hdXRoMi9kZWZhdWx0IiwiYXRfaGFzaCI6InFrNEIwNkRXTkNwUjQteDNFaDRyNWciLCJha19wcm94eSI6eyJ1c2VyX2F0dHJpYnV0ZXMiOnt9LCJpc19zdXBlcnVzZXIiOnRydWV9LCJlbWFpbCI6InJvb3RAZXhhbXBsZS5jb20iLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwibmFtZSI6ImF1dGhlbnRpayBEZWZhdWx0IEFkbWluIiwiZ2l2ZW5fbmFtZSI6ImF1dGhlbnRpayBEZWZhdWx0IEFkbWluIiwicHJlZmVycmVkX3VzZXJuYW1lIjoiYWthZG1pbiIsIm5pY2tuYW1lIjoiYWthZG1pbiIsImdyb3VwcyI6WyJhdXRoZW50aWsgQWRtaW5zIl19.mixTJL_rxYWreIITJSABx7DQM3YkMCPEBTZdv3ENiUM","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie encode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"final redirect","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","redirect":"http://debug.127-0-0-1.nip.io","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/callback?X-authentik-auth-callback=true&code=0ba045d62af940b38010875ebb20b747&state=I05Okjm0aDwpRW9j5p7x_MlT__RAHbznkx6biTSqljY","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40780","runtime":"70.785","scheme":"http","size":52,"status":302,"timestamp":"2023-09-13T16:13:28Z","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"tracing headers for debug","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["fr-FR,fr;q=0.9"],"Connection":["close"],"Cookie":["authentik_proxy_xa3sH6eM=MTY5NDYyMTYwOHxOd3dBTkRKSldrSlhWMHBhU2tZMFMxQklSRVJHU0VsS1FsUklSVlpWU1VKRVIwMHlUVlZXTjB0WFFVMVlUa2MyV0VsS1VVbEJSVkU9fCKgFyTvoPj5gD8sjfzJY4NT2lyxfw4mCGRWlAyV8f1Z"],"Sec-Ch-Ua":["\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\""],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Site":["cross-site"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Auth-Request-Redirect":["/"],"X-Forwarded-For":["10.42.2.0"],"X-Forwarded-Host":["debug.127-0-0-1.nip.io"],"X-Original-Method":["GET"],"X-Original-Url":["https://debug.127-0-0-1.nip.io/"],"X-Real-Ip":["10.42.2.0"],"X-Request-Id":["960eb527fd4c408cdde5fef71ac292c4"],"X-Sent-From":["nginx-ingress-controller"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"nginx forwarded url","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z","url":"https://debug.127-0-0-1.nip.io/"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"headers written to forward_auth","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Authentik-Email":["root@example.com"],"X-Authentik-Groups":["authentik Admins"],"X-Authentik-Jwt":["eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.mixTJL_rxYWreIITJSABx7DQM3YkMCPEBTZdv3ENiUM"],"X-Authentik-Meta-App":["debug"],"X-Authentik-Meta-Jwks":["http://authentik.authentik.svc.cluster.local/application/o/debug/jwks/"],"X-Authentik-Meta-Outpost":["in-cluster outpost"],"X-Authentik-Meta-Provider":["debug"],"X-Authentik-Meta-Version":["goauthentik.io/outpost/2023.8.2"],"X-Authentik-Name":["authentik Default Admin"],"X-Authentik-Uid":["f6e588aaa5fcd595473390cefa7dbd4f11ebcc61960d4b0bc8c712cdc2b39ffa"],"X-Authentik-Username":["akadmin"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/auth/nginx","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40518","runtime":"0.263","scheme":"http","size":0,"status":200,"timestamp":"2023-09-13T16:13:28Z","user":"akadmin","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-qrf94 proxy {"app":"debug","event":"Found app based direct host match","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"passing to application mux","host":"debug.127-0-0-1.nip.io","level":"trace","logger":"authentik.outpost.proxyv2","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"cookie decode","level":"trace","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"tracing headers for debug","header":{"Accept":["image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["fr-FR,fr;q=0.9"],"Connection":["close"],"Cookie":["authentik_proxy_xa3sH6eM=MTY5NDYyMTYwOHxOd3dBTkRKSldrSlhWMHBhU2tZMFMxQklSRVJHU0VsS1FsUklSVlpWU1VKRVIwMHlUVlZXTjB0WFFVMVlUa2MyV0VsS1VVbEJSVkU9fCKgFyTvoPj5gD8sjfzJY4NT2lyxfw4mCGRWlAyV8f1Z"],"Referer":["https://debug.127-0-0-1.nip.io/"],"Sec-Ch-Ua":["\"Chromium\";v=\"116\", \"Not)A;Brand\";v=\"24\", \"Google Chrome\";v=\"116\""],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["image"],"Sec-Fetch-Mode":["no-cors"],"Sec-Fetch-Site":["same-origin"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Auth-Request-Redirect":["/favicon.ico"],"X-Forwarded-For":["10.42.2.0"],"X-Forwarded-Host":["debug.127-0-0-1.nip.io"],"X-Original-Method":["GET"],"X-Original-Url":["https://debug.127-0-0-1.nip.io/favicon.ico"],"X-Real-Ip":["10.42.2.0"],"X-Request-Id":["7d8b6feeda057257837482ef019df906"],"X-Sent-From":["nginx-ingress-controller"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"nginx forwarded url","level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z","url":"https://debug.127-0-0-1.nip.io/favicon.ico"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"headers written to forward_auth","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"],"X-Authentik-Email":["root@example.com"],"X-Authentik-Groups":["authentik Admins"],"X-Authentik-Jwt":["eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.mixTJL_rxYWreIITJSABx7DQM3YkMCPEBTZdv3ENiUM"],"X-Authentik-Meta-App":["debug"],"X-Authentik-Meta-Jwks":["http://authentik.authentik.svc.cluster.local/application/o/debug/jwks/"],"X-Authentik-Meta-Outpost":["in-cluster outpost"],"X-Authentik-Meta-Provider":["debug"],"X-Authentik-Meta-Version":["goauthentik.io/outpost/2023.8.2"],"X-Authentik-Name":["authentik Default Admin"],"X-Authentik-Uid":["f6e588aaa5fcd595473390cefa7dbd4f11ebcc61960d4b0bc8c712cdc2b39ffa"],"X-Authentik-Username":["akadmin"]},"level":"trace","logger":"authentik.outpost.proxyv2.application","name":"debug","timestamp":"2023-09-13T16:13:28Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"/outpost.goauthentik.io/auth/nginx","host":"debug.127-0-0-1.nip.io","level":"info","logger":"authentik.outpost.proxyv2.application","method":"GET","name":"debug","remote":"10.42.1.2:40520","runtime":"0.324","scheme":"http","size":0,"status":200,"timestamp":"2023-09-13T16:13:28Z","user":"akadmin","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36"}
ak-outpost-default-8598cd8789-bz2p5 proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:37Z"}
ak-outpost-default-8598cd8789-qrf94 proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:37Z"}
ak-outpost-default-8598cd8789-prkgh proxy {"event":"hello'd","level":"trace","logger":"authentik.outpost.ak-api-controller","loop":"ws-health","timestamp":"2023-09-13T16:13:37Z"}

Additional context
I've tested the same configuration with NGINX and Traefik and I have no issue with Traefik.

If I understand correctly, NGINX calls the auth-forward-url directly and, with the configuration using the Kubernetes service directly, the authentication request between NGINX and the Authentik outpost is load-balanced between the outposts.

I have the impression that the outpost registers the session locally and that the other outposts fail to retrieve the cookie information from any outpost other than themselves. Another observation is that the authentik_proxy_* cookie changes every time we have a redirection/authentication loop.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workinglegacy/wontfix

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions