#Oauth2 revoke token: 401 - invalid_client

1 messages · Page 1 of 1 (latest)

molten stream
#

Authentik version: 2024.8.2

Hey all,
I have a Oauth2 provider with a public client type situation where I tried to revoke my token.

Through multiple oauth2 doc, I am supposed provide a basic auth:

"Authorization: Basic {Base64(<client_id>:<client_secret>)}"
In the header, I sent "Authorization: Basic Base64(<client_id>:none) but I still have a 401 error "error: invalid_client"

Logs gave me this:

{"event":"tracing request to backend","headers":{"Accept":["*/*"],"Authorization":["Basic <REDACTED>"],"Content-Length":["1710"],"Content-Type":["application/x-www-form-urlencoded"],"Postman-Token":["<REDACTED>"],"User-Agent":["PostmanRuntime/7.42.0"],"X-Forwarded-For":["<REDACTED>"],"X-Forwarded-Host":["<redacted>"],"X-Forwarded-Port":["443"],"X-Forwarded-Proto":["https"],"X-Forwarded-Server":["07015bfa2dcd"],"X-Real-Ip":["<REDACTED>"]},"level":"trace","logger":"authentik.router","timestamp":"2024-10-08T15:15:08Z","url":"http://localhost:8000/application/o/revoke/"}

{"auth_via": "unauthenticated", "domain_url": "<REDACTED>", "event": "(basic) Provider for basic auth does not exist", "host": "authentik.sdir.re", "level": "debug", "logger": "authentik.providers.oauth2.utils", "pid": 148, "request_id": "c84d516b96c249c2bf83c6dfba77ba94", "schema_name": "public", "timestamp": "2024-10-08T15:15:08.166909"}

{"auth_via": "unauthenticated", "domain_url": "<REDACTED>", "event": "/application/o/revoke/", "host": "<REDACTED>", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 148, "remote": "<REDACTED>", "request_id": "c84d516b96c249c2bf83c6dfba77ba94", "runtime": 22, "schema_name": "public", "scheme": "https", "status": 401, "timestamp": "2024-10-08T15:15:08.170293", "user": "", "user_agent": "PostmanRuntime/7.42.0"}

I also have Netbird deployed and have the same error

#

I also tried the following POST request

curl -X POST https://<R>/application/o/revoke/ \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "token=<access_token>" \
  -d "client_id=<client_id>" \
  -d "token_type_hint=access_token"
frosty delta
#

Any updates? I am tring as well and getting the same error.