Comments (13)
Using data also doesn't work:
data "zitadel_application_oidc" "default" {
org_id = zitadel_org.default.id
project_id = zitadel_project.default.id
app_id = zitadel_application_oidc.default.id
}
output "application_oidc" {
value = nonsensitive(zitadel_application_oidc.default.client_secret)
}
from terraform-provider-zitadel.
I am wondering if whatever call is happening for GetClientSecret() is not structured properly in the terraform? I am trying to tease it apart, but it seems like it aligns with grpc or api zitadel endpoints.
from terraform-provider-zitadel.
In zitadel-go/pkg/client/zitadel/management.pb.go
I have noticed:
func (x *AddOIDCAppResponse) GetClientSecret() string {
if x != nil {
return x.ClientSecret
}
return ""
}
type AddOIDCAppResponse struct {
...
ClientSecret string `protobuf:"bytes,4,opt,name=client_secret,json=clientSecret,proto3" json:"client_secret,omitempty"`
...
}
}```
Which is leading me to believe that x is evaluating to nil. Tracing from here
from terraform-provider-zitadel.
Will be diving into here later: https://github.com/zitadel/zitadel/tree/main/pkg/grpc
update to not forget:
https://github.com/zitadel/zitadel/blob/main/internal/api/grpc/management/project_application.go#L96 -> https://github.com/zitadel/zitadel/blob/main/internal/command/project_application_oidc.go (Potentially relevant lines: 170, 175, 211)
from terraform-provider-zitadel.
I need to compare calls from web client and calls from go client, but currently think that the Terraform and Web Client application uses the same code from Zitadel Repo. I have never written a Terraform Provider before, so I will try to determine what Terraform uses to interact with Zitadel host. I had trouble finding relevant code in Terraform module before, so I will look to imports. I thought it was using Go Client based on. Hoping this is just user error on my end, but don't know yet.
from terraform-provider-zitadel.
Now on TF Provider 1.0.4 and Zitadel 2.40.2
from terraform-provider-zitadel.
I have verified that secret is empty in state as well:
from terraform-provider-zitadel.
I have also tried manually defining resource "zitadel_org_idp_oidc" with an explicit client id and secret, and the app secret is still empty.
from terraform-provider-zitadel.
Could the Go crypto module be having issues
from terraform-provider-zitadel.
Was crypto module recently upgraded? golang/go#63987
from terraform-provider-zitadel.
Crypto update 3 weeks ago to 0.14: on Oct 17, 2023 zitadel/zitadel@3bbcc34
from terraform-provider-zitadel.
Regression tested with 2.38.1. Likely not crypto module. Will test with 2.37.3 just in case. 2.40.4 also didn't fix.
update: also tested with 2.37.3 - same issue.
Saw no issues @
/debug/metrics
from terraform-provider-zitadel.
Closing this, and slightly angry at documentation or error messages.
Please indicate that Zitadel PKCE does not return a client secret. Everywhere else I have used this auth method, I have had a client secret as well. Zitadel is the first place I have not used Client Secret with PKCE, and it is nice that I don't have to, but I definitely wasted days of time.
from terraform-provider-zitadel.
Related Issues (20)
- Plugin did not respond HOT 1
- Add ability to override issuer HOT 6
- Add ability to data sources to search by name
- zitadel_trigger_actions (resource) is missing 'FLOW_TYPE_INTERNAL_AUTHENTICATION' value
- SAML applications HOT 5
- unable to obtain client_id/ client_secret from zitadel_org_oidc_idp
- Zitadel provider fails to upload images using resource "zitadel_label_policy" HOT 6
- pulumi zitadel package maintenance HOT 8
- Cloudflare proxy support HOT 5
- Defer/lazy loading of provider configuration HOT 3
- LoginPolicy.hide_password_reset inverts the setting HOT 2
- Datasource Zitadel project roles
- failed to respond to the plugin6.(*GRPCProvider).ReadDataSource call
- Generic OAuth2 IDP provider resource missing on org level HOT 1
- LabelPolicy: add possibility to set theme_mode HOT 1
- Update to `zitadel_smtp_config` fails HOT 3
- Missing 'skip login success page' option for native app redirect settings HOT 2
- Activate smtp config not possible HOT 2
- Terraform provider configuration improvement HOT 1
- zitadel_application_oidc fails when adding clock_skew attribute
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from terraform-provider-zitadel.