Can't use external browser to do callback

[agaripian]

Describe the bug
I am using gpclient 2.3.9 (2024-11-02) with Webtop running in docker over KASM VNC. I can't launch the GUI unless I run sudo gpservice, after which the GUI launches. I configured it to use an external browser since the built-in browser authentication does not work—it requires a Windows user agent with okta (which would be a nice option for the future).

Using Firefox, I can authenticate, and I reach the Palo Alto auth screen that says, "when you see the dialog on the browser...". However, when I click "Click here to launch GlobalProtect," nothing happens. In the browser console, I see the message: "Prevented navigation to 'globalprotectcallback:P...'"

I also tried xdg-mime query default x-scheme-handler/globalprotectcallback, which is set to gpgui.desktop.
I’m guessing this doesn’t work because I had to launch the GUI in a different way?

Thanks for a great app, will pay once i get it working!

Expected behavior
globalprotectcallback to talk back to the gui app

Environment:

• OS: Ubuntu 24.04.1 LTS
• Desktop Environment: KDE
• Is remote SSH? YES ? i think its a docker container and i use webtop, its over vnc

[yuezk]

This may related to the environment you're working with. Using the client in docker is not well-tested.