Integration with Oauth provider LemonLDAP is not working

[radokristof]

Describe the issue

Integration with Oauth provider LemonLDAP is not working. I tried multiple configuration options, I always get the same error:

ERR ts=1712268954.276949 logger=docker-proxy msg=Error response from server server=localhost status code=400 body={"error":"loading config: loading new config: loading security app module: provision security: server initialization failed: failed configuring identity provider: failed to fetch jwt keys for OAuth 2.0 authorization server: invalid jwks key: jwks unsupported key algorithm RSA-OAEP-256 for encrypt01"}

Configuration

Paste full Caddyfile below:

{
	order authenticate before respond
	order authorize before reverse_proxy
	acme_dns cloudflare REDACTED_KEY
	email [email protected]
	log access {
		format json
		include http.log.access http.handlers.reverse_proxy
		level DEBUG
		output file /var/log/caddy/access.log {
			roll_keep 5
			roll_keep_for 2160h
			roll_size 1gb
		}
	}
	log default {
		exclude http.log.access
		format json
		level INFO
		output file /var/log/caddy/runtime.log {
			roll_keep 3
			roll_keep_for 720h
			roll_size 500mb
		}
	}
	security {
		oauth identity provider generic {
			realm generic
			driver generic
			client_id caddy
			client_secret SECRET
			scopes openid email profile
			base_auth_url https://sso.company.com/
			metadata_url https://sso.company.com/.well-known/openid-configuration
		}
		authentication portal applogin {
			crypto default token lifetime 3600
			cookie domain auth.company.com
			enable identity provider generic
			transform user {
				action add role app/user
				match realm generic
			}
		}
	}
	servers {
		trusted_proxies cloudflare {
			interval 12h
			timeout 15s
		}
	}
}

Expected behavior

The JWKS key should be accepted and oauth provider should work correctly.

[greenpau]

@radokristof , it is impossible to troubleshoot this without having access to live system. If you do set one up for me, please reach on LinkedIn and I will help you out.

[radokristof]

@greenpau thank you, message sent

[radokristof]

version 1.1.29 now supports lemonldap. Thank you @greenpau for your help!