I
Immich•6mo ago
PJ

failed to link oauth account immich server error

Trying to setup oauth (authentik) with immich but running into the error above. Logs say the following:
Unknown error: RPError: failed to decode JWT (TypeError: encrypted JWTs cannot be decoded)
RPError: failed to decode JWT (TypeError: encrypted JWTs cannot be decoded)
at Client.validateJWT (/app/immich/server/node_modules/openid-client/lib/client.js:931:13)
at Client.validateIdToken (/app/immich/server/node_modules/openid-client/lib/client.js:793:60)
at Client.callback (/app/immich/server/node_modules/openid-client/lib/client.js:532:18)
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async OAuthRepository.getProfile (/app/immich/server/dist/repositories/oauth.repository.js:45:28)
at async AuthService.link (/app/immich/server/dist/services/auth.service.js:181:34)
Unknown error: RPError: failed to decode JWT (TypeError: encrypted JWTs cannot be decoded)
RPError: failed to decode JWT (TypeError: encrypted JWTs cannot be decoded)
at Client.validateJWT (/app/immich/server/node_modules/openid-client/lib/client.js:931:13)
at Client.validateIdToken (/app/immich/server/node_modules/openid-client/lib/client.js:793:60)
at Client.callback (/app/immich/server/node_modules/openid-client/lib/client.js:532:18)
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async OAuthRepository.getProfile (/app/immich/server/dist/repositories/oauth.repository.js:45:28)
at async AuthService.link (/app/immich/server/dist/services/auth.service.js:181:34)
I followed this guide: https://immich.app/docs/administration/oauth/ Running: Unraid
9 Replies
Immich
Immich•6mo ago
:wave: Hey @PJ, Thanks for reaching out to us. Please follow the recommended actions below; this will help us be more effective in our support effort and leave more time for building Immich :immich:. References - Container Logs: docker compose logs docs - Container Status: docker compose ps docs - Reverse Proxy: https://immich.app/docs/administration/reverse-proxy Checklist 1. :ballot_box_with_check: I have verified I'm on the latest release(note that mobile app releases may take some time). 2. :ballot_box_with_check: I have read applicable release notes. 3. :ballot_box_with_check: I have reviewed the FAQs for known issues. 4. :ballot_box_with_check: I have reviewed Github for known issues. 5. :ballot_box_with_check: I have tried accessing Immich via local ip (without a custom reverse proxy). 6. :ballot_box_with_check: I have uploaded the relevant logs, docker compose, and .env files, making sure to use code formatting. 7. :ballot_box_with_check: I have tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable (an item can be marked as "complete" by reacting with the appropriate number) If this ticket can be closed you can use the /close command, and re-open it later if needed. Successfully submitted, a tag has been added to inform contributors. :white_check_mark:
PJ
PJOP•6mo ago
checked all the github/discord info and couldnt find a similar issue
schuhbacca
schuhbacca•6mo ago
What oauth provider?
PJ
PJOP•6mo ago
Authentik im using SWAG (NGINX) for reverse proxy
schuhbacca
schuhbacca•6mo ago
You will probably have to post some of your configs. I use authentik with immich and have not seen this issue.
PJ
PJOP•6mo ago
No description
No description
No description
schuhbacca
schuhbacca•6mo ago
I'll check my config later for comparison
PJ
PJOP•6mo ago
thank you 🙂 yeah for some reason i just cant seem to get it to work at all ahh figured it out. under "Providers" I had "Encryption Key" on.. Solution: double check that "encryption key" in Authentik is not selected/enabled
Immich
Immich•6mo ago
This thread has been closed. To re-open, use the button below.

Did you find this page helpful?