Hosting in AKS Error


#1

Hi Sebastian!

I trying to host app in my Azure Kubernetes Services, and when I go to url for login, I get throw this message : “Operation failed
Invalid redirect_uri”.

I based my setup in “https://github.com/Squidex/squidex-docker/tree/master/standalone/kubernetes” files.

Could you help-me?


#2

Have you read this: https://docs.squidex.io/getting-started/configuration ?


#3

Yes.
I pass settings by environment variable. You can see below my yaml file:

    #	Copyright 2016, Google, Inc.
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http:#www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: squidex
spec:
  replicas: 2
  template:
    metadata:
      labels:
        app: squidex
    spec:
      containers:
        - name: squidex
          image: squidex/squidex:latest
          imagePullPolicy: Always
          ports:
            - containerPort: 80
          env:
            - name: URLS__BASEURL
              value: "squidex.xyzsite.com.br"
            - name: URLS__ENFORCEHTTPS
              value: "False"
            - name: ASSETSTORE__TYPE
              value: AzureBlob 
            - name: ASSETSTORE__AZUREBLOB__CONNECTIONSTRING
              value: DefaultEndpointsProtocol=https;AccountName=zyx-storage;AccountKey=tfm7mLoUdsfED40upHoWz92VIkGq5r2Os1wRLIvKMTRD8z5wMvDS17E3HekKABrKbtQyj49a8CzMNwan9X2erQ==;EndpointSuffix=core.windows.net
            - name: LOGGING__HUMAN
              value: "True"
            - name: EVENTSTORE__MONGODB__CONFIGURATION
              value: "mongodb://mongo-0.mongo,mongo-1.mongo,mongo-2.mongo:27017/"
            - name: EVENTSTORE__MONGODB__DATABASE
              value: "Squidex"
            - name: STORE__MONGODB__CONFIGURATION
              value: "mongodb://mongo-0.mongo,mongo-1.mongo,mongo-2.mongo:27017/"
            - name: STORE__MONGODB__DATABASE
              value: "Squidex"
            - name: STORE__MONGODB__CONTENTDATABASE
              value: "SquidexContent"
            - name: VIRTUAL__HOST
              value: squidex.xyzsite.com.br
            - name: SQUIDEX_DOMAIN
              value: squidex.xyzsite.com.br
            - name: IDENTITY__ADMINEMAIL
              value: rodolpho.sa@live.com
            - name: IDENTITY__ADMINPASSWORD
              value: Mudar.123
            - name: IDENTITY__GITHUBCLIENT
              value: ""
            - name: IDENTITY__GITHUBSECRET
              value: ""
            - name: IDENTITY__GOOGLECLIENT
              value: ""
            - name: IDENTITY__GOOGLESECRET
              value: ""
            - name: IDENTITY__MICROSOFTCLIENT
              value: ""
            - name: IDENTITY__MICROSOFTSECRET
              value: ""
            - name: IDENTITY__ALLOWPASSWORDAUTH
              value: "True"
            - name: IDENTITY__LOCKAUTOMATICALLY
              value: "False"
            - name : WEBSITES_ENABLE_APP_SERVICE_STORAGE
              value: "False"
      terminationGracePeriodSeconds: 60
  revisionHistoryLimit: 2
---
apiVersion: v1
kind: Service
metadata:
  name: squidex
  labels:
    name: squidex
spec:
  ports:
    - port: 80
      targetPort: 80
  selector:
    app: squidex
  type: LoadBalancer

#4

This is the log from container:

    {
  "logLevel": "Information",
  "message": "Application started",
  "environment": {
    "aspnetcoreUrls": "http://+:80",
    "assets:defaultpagesize": "200",
    "assets:defaultpagesizegraphql": "20",
    "assets:maxresults": "200",
    "assets:maxsize": "5242880",
    "assetstore:azureblob:connectionstring": "DefaultEndpointsProtocol=https;AccountName=xyz-storage;AccountKey=tfm7mLoUdsfED40upHoWz92VIkGq5r2Os1wRLIvKMTRD8z5wMvDS17E3HekKABrKbtQyj49a8CzMNwan9X2erQ==;EndpointSuffix=core.windows.net",
    "assetstore:azureblob:containername": "squidex-assets",
    "assetstore:exposesourceurl": "False",
    "assetstore:folder:path": "Assets",
    "assetstore:ftp:password": "",
    "assetstore:ftp:path": "Assets",
    "assetstore:ftp:serverhost": "",
    "assetstore:ftp:serverport": "21",
    "assetstore:ftp:username": "",
    "assetstore:googlecloud:bucket": "squidex-assets",
    "assetstore:mongodb:bucket": "fs",
    "assetstore:mongodb:configuration": "mongodb://localhost",
    "assetstore:mongodb:database": "SquidexAssets",
    "assetstore:type": "AzureBlob",
    "contents:defaultpagesize": "200",
    "contents:defaultpagesizegraphql": "20",
    "contents:maxresults": "200",
    "contentscontroller:enablesurrogatekeys": "True",
    "contentscontroller:maxitemsforsurrogatekeys": "200",
    "dotnetRunningInContainer": "true",
    "dotnetSystemGlobalizationInvariant": "true",
    "email:notifications:existinguserbody": "Dear User,\r\n\r\n$ASSIGNER_NAME ($ASSIGNER_EMAIL) has invited you to join App $APP_NAME at Squidex Headless CMS.\r\n\r\nLogin or reload the Management UI to see the App.\r\n\r\nThank you very much,\r\nThe Squidex Team\r\n\r\n<<Start now!>> [$UI_URL]",
    "email:notifications:existingusersubject": "[Squidex CMS] You have been invited to join App $APP_NAME",
    "email:notifications:newuserbody": "Welcome to Squidex\r\nDear User,\r\n\r\n$ASSIGNER_NAME ($ASSIGNER_EMAIL) has invited you to join Project (also called an App) $APP_NAME at Squidex Headless CMS. Login with your Github, Google or Microsoft credentials to create a new user account and start editing content now.\r\n\r\nThank you very much,\r\nThe Squidex Team\r\n\r\n<<Start now!>> [$UI_URL]",
    "email:notifications:newusersubject": "You have been invited to join Project $APP_NAME at Squidex CMS",
    "email:smtp:enablessl": "True",
    "email:smtp:password": "",
    "email:smtp:port": "465",
    "email:smtp:sender": "hello@squidex.io",
    "email:smtp:server": "",
    "email:smtp:username": "",
    "etags:strong": "False",
    "eventpublishers:alltorabbitmq:configuration": "amqp://guest:guest@localhost/",
    "eventpublishers:alltorabbitmq:enabled": "False",
    "eventpublishers:alltorabbitmq:eventsfilter": ".*",
    "eventpublishers:alltorabbitmq:exchange": "squidex",
    "eventpublishers:alltorabbitmq:type": "RabbitMq",
    "eventstore:cosmosdb:configuration": "https://localhost:8081",
    "eventstore:cosmosdb:database": "Squidex",
    "eventstore:cosmosdb:masterkey": "C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==",
    "eventstore:geteventstore:configuration": "ConnectTo=tcp://admin:changeit@localhost:1113; HeartBeatTimeout=500; MaxReconnections=-1",
    "eventstore:geteventstore:prefix": "squidex",
    "eventstore:geteventstore:projectionhost": "localhost",
    "eventstore:mongodb:configuration": "mongodb://mongo-0.mongo,mongo-1.mongo,mongo-2.mongo:27017/",
    "eventstore:mongodb:database": "Squidex",
    "eventstore:type": "MongoDb",
    "healthz:gc:threshold": "4096",
    "home": "/root",
    "hostname": "squidex-58b4d5f584-bkfw4",
    "identity:adminclientid": "",
    "identity:adminclientsecret": "",
    "identity:adminemail": "rodolpho.sa@live.com",
    "identity:adminpassword": "Mudar.123",
    "identity:allowpasswordauth": "True",
    "identity:githubclient": "",
    "identity:githubsecret": "",
    "identity:googleclient": "",
    "identity:googlesecret": "",
    "identity:lockautomatically": "False",
    "identity:microsoftclient": "",
    "identity:microsoftsecret": "",
    "identity:oidcauthority": "",
    "identity:oidcclient": "",
    "identity:oidcname": "OIDC",
    "identity:oidcsecret": "",
    "identity:privacyurl": "https://squidex.io/privacy",
    "kubernetesPort": "tcp://10.0.0.1:443",
    "kubernetesPort443Tcp": "tcp://10.0.0.1:443",
    "kubernetesPort443TcpAddr": "10.0.0.1",
    "kubernetesPort443TcpPort": "443",
    "kubernetesPort443TcpProto": "tcp",
    "kubernetesServiceHost": "10.0.0.1",
    "kubernetesServicePort": "443",
    "kubernetesServicePortHttps": "443",
    "logging:colors": "True",
    "logging:human": "True",
    "mode:isreadonly": "False",
    "news:appname": "squidex-website",
    "news:clientid": "squidex-website:default",
    "news:clientsecret": "QGgqxd7bDHBTEkpC6fj8sbdPWgZrPrPfr3xzb3LKoec=",
    "orleans:clustering": "Development",
    "orleans:gatewayport": "40000",
    "orleans:siloport": "11111",
    "path": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
    "plugins:0": "Squidex.Extensions.dll",
    "rebuild:apps": "False",
    "rebuild:assets": "False",
    "rebuild:contents": "False",
    "rebuild:indexes": "False",
    "rebuild:rules": "False",
    "rebuild:schemas": "False",
    "robots:text": "User-agent: *\nAllow: /api/assets/*",
    "squidexDomain": "squidex.xyzsite.com.br",
    "squidexPort": "tcp://10.0.250.95:80",
    "squidexPort80Tcp": "tcp://10.0.250.95:80",
    "squidexPort80TcpAddr": "10.0.250.95",
    "squidexPort80TcpPort": "80",
    "squidexPort80TcpProto": "tcp",
    "squidexServiceHost": "10.0.250.95",
    "squidexServicePort": "80",
    "store:mongodb:configuration": "mongodb://mongo-0.mongo,mongo-1.mongo,mongo-2.mongo:27017/",
    "store:mongodb:contentdatabase": "SquidexContent",
    "store:mongodb:database": "Squidex",
    "store:mongodb:engine": "MongoDb",
    "store:type": "MongoDb",
    "translations:deeplauthkey": "",
    "ui:map:googlemaps:key": "AIzaSyB_Z8l3nwUxZhMJykiDUJy6bSHXXlwcYMg",
    "ui:map:type": "OSM",
    "ui:onlyadminscancreateapps": "False",
    "ui:regexsuggestions:email": "^[a-zA-Z0-9.!#$%&ÔÇÖ*+\\/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:.[a-zA-Z0-9-]+)*$",
    "ui:regexsuggestions:phone": "^\\(*\\+*[1-9]{0,3}\\)*-*[1-9]{0,3}[-. /]*\\(*[2-9]\\d{2}\\)*[-. /]*\\d{3}[-. /]*\\d{4} *e*x*t*\\.* *\\d{0,4}$",
    "ui:regexsuggestions:slug": "^[a-z0-9]+(\\-[a-z0-9]+)*$",
    "ui:regexsuggestions:url": "^(?:http(s)?:\\/\\/)?[\\w.-]+(?:\\.[\\w\\.-]+)+[\\w\\-\\._~:\\/?#%[\\]@!\\$&'\\(\\)\\*\\+,;=.]+$",
    "urls:baseurl": "squidex.xyzsite.com.br",
    "urls:enforcehttps": "False",
    "virtual:host": "squidex.xyzsite.com.br",
    "websitesEnableAppServiceStorage": "False"
  },
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:42Z"
}

{
  "logLevel": "Information",
  "message": "Starting IdentityServer4 version 2.4.0.0",
  "version": "2.4.0.0",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:43Z",
  "category": "IdentityServer4.Startup"
}

{
  "logLevel": "Information",
  "message": "Using the default authentication scheme Identity.Application for IdentityServer",
  "scheme": "Identity.Application",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:43Z",
  "category": "IdentityServer4.Startup"
}

{
  "logLevel": "Information",
  "action": "pluginsLoaded",
  "status": "Completed",
  "errors": [],
  "plugins": [
    "Squidex.Extensions.Samples.AssetStore.MemoryAssetStorePlugin",
    "Squidex.Extensions.Actions.Webhook.WebhookPlugin",
    "Squidex.Extensions.Actions.Twitter.TwitterPlugin",
    "Squidex.Extensions.Actions.Slack.SlackPlugin",
    "Squidex.Extensions.Actions.Prerender.PrerenderPlugin",
    "Squidex.Extensions.Actions.Medium.MediumPlugin",
    "Squidex.Extensions.Actions.Fastly.FastlyPlugin",
    "Squidex.Extensions.Actions.Email.EmailPlugin",
    "Squidex.Extensions.Actions.ElasticSearch.ElasticSearchPlugin",
    "Squidex.Extensions.Actions.Discourse.DiscoursePlugin",
    "Squidex.Extensions.Actions.AzureQueue.AzureQueuePlugin",
    "Squidex.Extensions.Actions.Algolia.AlgoliaPlugin"
  ],
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:43Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "AzureBlobAssetStore",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:44Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoEventStore",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "SerializationInitializer",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoMigrationStatus",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoUsageRepository",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoRuleEventRepository",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoHistoryEventRepository",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoRoleStore",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoUserStore",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoAssetRepository",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoContentRepository",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Information",
  "initializedSystem": "MongoPersistedGrantStore",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:45Z"
}

{
  "logLevel": "Warning",
  "message": "Task [Id=1, Status=RanToCompletion] in WorkGroup [LowPrioritySystemTarget: S21.240.0.11:11111:300451963*stg/0/00000000@S00000000] took elapsed time 0:00:00.2805748 for execution, which is longer than 00:00:00.2000000. Running on thread System.Threading.Thread",
  "eventId": {
    "id": 101215
  },
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:46Z",
  "category": "Orleans.Runtime.Scheduler.WorkItemGroup"
}

{
  "logLevel": "Information",
  "backgroundSystem": "Squidex.Domain.Apps.Entities.Contents.IContentSchedulerGrain",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:46Z"
}

{
  "logLevel": "Information",
  "backgroundSystem": "Squidex.Domain.Apps.Entities.Rules.IRuleDequeuerGrain",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:46Z"
}

{
  "logLevel": "Information",
  "backgroundSystem": "Squidex.Infrastructure.EventSourcing.Grains.IEventConsumerManagerGrain",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:46Z"
}

{
  "logLevel": "Information",
  "backgroundSystem": "Squidex.Domain.Apps.Entities.Rules.UsageTracking.IUsageTrackerGrain",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "timestamp": "2019-07-10T10:52:46Z"
}

Hosting environment: Production
Content root path: /app
Now listening on: http://[::]:80
Application started. Press Ctrl+C to shut down.
{
  "logLevel": "Information",
  "filters": {
    "costs": 0.0
  },
  "elapsedRequestMs": 98,
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "01090326-dfab-4e3c-a8c9-2e50d9e8c5f0",
    "requestPath": "/build/index.html",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:53Z"
}

{
  "logLevel": "Information",
  "message": "Invoking IdentityServer endpoint: IdentityServer4.Endpoints.DiscoveryEndpoint for /.well-known/openid-configuration",
  "endpointType": "IdentityServer4.Endpoints.DiscoveryEndpoint",
  "url": "/.well-known/openid-configuration",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "49f232f4-5ea5-4081-8dff-7e9c86914d70",
    "requestPath": "/.well-known/openid-configuration",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:57Z",
  "category": "IdentityServer4.Hosting.IdentityServerMiddleware"
}

{
  "logLevel": "Information",
  "filters": {
    "costs": 0.0
  },
  "elapsedRequestMs": 290,
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "49f232f4-5ea5-4081-8dff-7e9c86914d70",
    "requestPath": "/identity-server/.well-known/openid-configuration",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:58Z"
}

{
  "logLevel": "Information",
  "message": "Invoking IdentityServer endpoint: IdentityServer4.Endpoints.AuthorizeEndpoint for /connect/authorize",
  "endpointType": "IdentityServer4.Endpoints.AuthorizeEndpoint",
  "url": "/connect/authorize",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "5d29a59c-603a-48b0-99f4-addb77b05ef6",
    "requestPath": "/connect/authorize",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:58Z",
  "category": "IdentityServer4.Hosting.IdentityServerMiddleware"
}

{
  "logLevel": "Error",
  "message": "Invalid redirect_uri: http://squidex.xyzsite.com.br/client-callback-popup\n{\n  \"ClientId\": \"squidex-frontend\",\n  \"ClientName\": \"squidex-frontend\",\n  \"AllowedRedirectUris\": [\n    \"squidex.xyzsite.com.br/login;\",\n    \"squidex.xyzsite.com.br/client-callback-silent\",\n    \"squidex.xyzsite.com.br/client-callback-popup\"\n  ],\n  \"SubjectId\": \"anonymous\",\n  \"RequestedScopes\": \"\",\n  \"Raw\": {\n    \"client_id\": \"squidex-frontend\",\n    \"redirect_uri\": \"http://squidex.xyzsite.com.br/client-callback-popup\",\n    \"response_type\": \"id_token token\",\n    \"scope\": \"squidex-api openid profile email squidex-profile role permissions\",\n    \"state\": \"4d9c901521ad41e6aaa44b1c86197147\",\n    \"nonce\": \"b02077ed12d54462be975b1fc03f08b2\",\n    \"display\": \"popup\"\n  }\n}",
  "detail": "http://squidex.xyzsite.com.br/client-callback-popup",
  "@requestDetails": "{\n  \"ClientId\": \"squidex-frontend\",\n  \"ClientName\": \"squidex-frontend\",\n  \"AllowedRedirectUris\": [\n    \"squidex.xyzsite.com.br/login;\",\n    \"squidex.xyzsite.com.br/client-callback-silent\",\n    \"squidex.xyzsite.com.br/client-callback-popup\"\n  ],\n  \"SubjectId\": \"anonymous\",\n  \"RequestedScopes\": \"\",\n  \"Raw\": {\n    \"client_id\": \"squidex-frontend\",\n    \"redirect_uri\": \"http://squidex.xyzsite.com.br/client-callback-popup\",\n    \"response_type\": \"id_token token\",\n    \"scope\": \"squidex-api openid profile email squidex-profile role permissions\",\n    \"state\": \"4d9c901521ad41e6aaa44b1c86197147\",\n    \"nonce\": \"b02077ed12d54462be975b1fc03f08b2\",\n    \"display\": \"popup\"\n  }\n}",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "5d29a59c-603a-48b0-99f4-addb77b05ef6",
    "requestPath": "/connect/authorize",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:58Z",
  "category": "IdentityServer4.Validation.AuthorizeRequestValidator"
}

{
  "logLevel": "Error",
  "message": "Request validation failed",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "5d29a59c-603a-48b0-99f4-addb77b05ef6",
    "requestPath": "/connect/authorize",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:58Z",
  "category": "IdentityServer4.Endpoints.AuthorizeEndpoint"
}

{
  "logLevel": "Information",
  "message": "{\n  \"ClientId\": \"squidex-frontend\",\n  \"ClientName\": \"squidex-frontend\",\n  \"AllowedRedirectUris\": [\n    \"squidex.xyzsite.com.br/login;\",\n    \"squidex.xyzsite.com.br/client-callback-silent\",\n    \"squidex.xyzsite.com.br/client-callback-popup\"\n  ],\n  \"SubjectId\": \"anonymous\",\n  \"RequestedScopes\": \"\",\n  \"Raw\": {\n    \"client_id\": \"squidex-frontend\",\n    \"redirect_uri\": \"http://squidex.xyzsite.com.br/client-callback-popup\",\n    \"response_type\": \"id_token token\",\n    \"scope\": \"squidex-api openid profile email squidex-profile role permissions\",\n    \"state\": \"4d9c901521ad41e6aaa44b1c86197147\",\n    \"nonce\": \"b02077ed12d54462be975b1fc03f08b2\",\n    \"display\": \"popup\"\n  }\n}",
  "@validationDetails": "{\n  \"ClientId\": \"squidex-frontend\",\n  \"ClientName\": \"squidex-frontend\",\n  \"AllowedRedirectUris\": [\n    \"squidex.xyzsite.com.br/login;\",\n    \"squidex.xyzsite.com.br/client-callback-silent\",\n    \"squidex.xyzsite.com.br/client-callback-popup\"\n  ],\n  \"SubjectId\": \"anonymous\",\n  \"RequestedScopes\": \"\",\n  \"Raw\": {\n    \"client_id\": \"squidex-frontend\",\n    \"redirect_uri\": \"http://squidex.xyzsite.com.br/client-callback-popup\",\n    \"response_type\": \"id_token token\",\n    \"scope\": \"squidex-api openid profile email squidex-profile role permissions\",\n    \"state\": \"4d9c901521ad41e6aaa44b1c86197147\",\n    \"nonce\": \"b02077ed12d54462be975b1fc03f08b2\",\n    \"display\": \"popup\"\n  }\n}",
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "5d29a59c-603a-48b0-99f4-addb77b05ef6",
    "requestPath": "/connect/authorize",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:58Z",
  "category": "IdentityServer4.Endpoints.AuthorizeEndpoint"
}

{
  "logLevel": "Information",
  "filters": {
    "costs": 0.0
  },
  "elapsedRequestMs": 116,
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "5d29a59c-603a-48b0-99f4-addb77b05ef6",
    "requestPath": "/identity-server/connect/authorize",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:58Z"
}

{
  "logLevel": "Information",
  "profiler": {
    "ExecuteResult": {
      "elapsedMsTotal": 383,
      "elapsedMsAvg": 383,
      "count": 1
    },
    "ExecuteAction": {
      "elapsedMsTotal": 106,
      "elapsedMsAvg": 106,
      "count": 1
    }
  },
  "filters": {
    "costs": 0.0
  },
  "elapsedRequestMs": 1157,
  "app": {
    "name": "Squidex",
    "version": "1.0.0.0",
    "sessionId": "5b0dbd47-8bd1-45eb-9461-476020b766a6"
  },
  "web": {
    "requestId": "9d8ecfeb-4d6f-41ac-b1d0-424d9406fff8",
    "requestPath": "/identity-server/error/",
    "requestMethod": "GET"
  },
  "timestamp": "2019-07-10T10:52:59Z"
}

#5

The logs are very clear about that:

Invalid redirect_uri: http://squidex.xyzsite.com.br/client-callback-popup
{
  "ClientId": "squidex-frontend",
  "ClientName": "squidex-frontend",
  "AllowedRedirectUris": [
    "squidex.xyzsite.com.br/login;",
    "squidex.xyzsite.com.br/client-callback-silent",
    "squidex.xyzsite.com.br/client-callback-popup"
  ],
  "SubjectId": "anonymous",
  "RequestedScopes": "",
  "Raw": {
    "client_id": "squidex-frontend",
    "redirect_uri": "http://squidex.xyzsite.com.br/client-callback-popup",
    "response_type": "id_token token",
    "scope": "squidex-api openid profile email squidex-profile role permissions",
    "state": "4d9c901521ad41e6aaa44b1c86197147",
    "nonce": "b02077ed12d54462be975b1fc03f08b2",
    "display": "popup"
  }
}

URLS__BASEURL must be an URL not a HOST Name, e.g. http://squidex.xyzsite.com.br


#6

Thanks Sebastian!

Now works fine! :smiley: