Token endpoint not called

[nchetbani]

we configured our apache to use the module (version 1.8.8) that way:

<VirtualHost *:443>
               ServerName <server>
			   
				OIDCSSLValidateServer Off
				OIDCProviderMetadataURL <urlTo>/.well-known/openid-configuration
				OIDCClientID <id>
				OIDCCryptoPassphrase <passphrase>
				OIDCClientSecret <secret>
				OIDCRedirectURI https://<url>/redirect_uri
				OIDCResponseType code
				OIDCScope "openid profile email phone address"
				OIDCPKCEMethod S256
				OIDCPassClaimsAs both
				OIDCPassIDTokenAs serialized
				OIDCSessionInactivityTimeout 28000
				OIDCSessionMaxDuration 28000
				OIDCProviderTokenEndpointAuth client_secret_basic
				OIDCProviderTokenEndpoint <urlTo>/token
				OIDCCookiePath /

              <Location />
                 AuthType openid-connect
                 Require valid-user
              </Location>
<VirtualHost>

After login and successful redirection the token endpoint is not called implicitly

[zandbelt]

Please use the latest version and provide the server debug logs

[nchetbani]

Thank you for your answer !!!

After upgrading to the latest version, the problem is still persisting

1. When OIDCResponseType is no specified or is "code" the token endpoint is not called but I've no error
2. When OIDCResponseType is "code id_token token" I get the following error in the browser

Error:

OpenID Connect Provider error: invalid_request

Description:

response_type_rp

In the server side here is an example of log (not all because the file is large) :

[Mon Mar 14 15:43:06.662949 2022] [auth_openidc:debug] [pid 12:tid 139852754888832] src/cache/shm.c(125): oidc_cache_shm_post_config: initialized shared memory with a cache size (# entries) of: 500, and a max (single) entry size of: 16913
[Mon Mar 14 15:43:06.664214 2022] [auth_openidc:debug] [pid 12:tid 139852754888832] src/cache/shm.c(125): oidc_cache_shm_post_config: initialized shared memory with a cache size (# entries) of: 500, and a max (single) entry size of: 16913
[Mon Mar 14 15:43:06.680351 2022] [auth_openidc:debug] [pid 12:tid 139852754888832] src/config.c(1570): oidc_config_check_vhost_config: enter

[Mon Mar 14 15:43:09.260912 2022] [authz_core:debug] [pid 13:tid 139852580484864] mod_authz_core.c(809): [client 10.228.196.196:44705] AH01626: authorization result of Require all granted: granted
[Mon Mar 14 15:43:09.260927 2022] [authz_core:debug] [pid 13:tid 139852580484864] mod_authz_core.c(809): [client 10.228.196.196:44705] AH01626: authorization result of <RequireAny>: granted

Mon Mar 14 15:43:14.248883 2022] [socache_shmcb:debug] [pid 97:tid 139852546914048] mod_socache_shmcb.c(522): AH00835: socache_shmcb_retrieve (0x1e -> subcache 30)
[Mon Mar 14 15:43:14.248949 2022] [socache_shmcb:debug] [pid 97:tid 139852546914048] mod_socache_shmcb.c(877): AH00851: shmcb_subcache_retrieve found no match
[Mon Mar 14 15:43:14.248960 2022] [socache_shmcb:debug] [pid 97:tid 139852546914048] mod_socache_shmcb.c(532): AH00836: leaving socache_shmcb_retrieve successfully
[Mon Mar 14 15:43:14.260541 2022] [socache_shmcb:debug] [pid 97:tid 139852546914048] mod_socache_shmcb.c(485): AH00831: socache_shmcb_store (0x4a -> subcache 10)
[Mon Mar 14 15:43:14.260589 2022] [socache_shmcb:debug] [pid 97:tid 139852546914048] mod_socache_shmcb.c(810): AH00847: insert happened at idx=0, data=(0:32)
[Mon Mar 14 15:43:14.260595 2022] [socache_shmcb:debug] [pid 97:tid 139852546914048] mod_socache_shmcb.c(815): AH00848: finished insert, subcache: idx_pos/idx_used=0/1, data_pos/data_used=0/180 

[zandbelt]

the error message shows that the provider returns an error response_type_rp about the request that was sent by mod_auth_openidc; the logs however don't show the outgoing request so there's not much to debug; you may have to look in another logfile of an Apache cluster for those?