Login works, but mailu says wrong email/password

[daniel-ratz]

Hi,

thanks for the latest update. OIDC with authentik doesn't throw any errors as of now. But now i just cannot login with any of my accounts. After successful authentication mailu tells that me "Wrong e-mail or password". I guess this is some kind of misconfiguration from my side, but where? OIDC itself seems to function, but i am trying to authenticate existing users, is this a problem?
I also tried to authenticate using a new user but again i also see "Wrong e-mail or password".

Is there a special attribute the users need to have in authentik?

i am thankful for any help.

[Encotric]

Hi,

unfortunately, I can't reproduce your issue by now. Without further information, its hard to understand where the problem occures. Therefore, could you please provide us e.g. logs of the admin container?

[daniel-ratz]

Absolutely, here are the admin container logs just after the oidc authentication:
admin-1 | 93.231.75.157 - - [25/Jan/2025:13:30:48 +0000] "GET /internal/auth/user HTTP/1.0" 403 213 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" admin-1 | [2025-01-25 13:30:51,264] WARNING in base: Login failed for None from <IP>

it seems like the User is "None"?

Here are also the logs from the front container:
admin-1 | [2025-01-25 13:33:47,924] WARNING in base: Login failed for None from <IP> front-1 | <IP> - - [25/Jan/2025:13:33:47 +0000] "GET /sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg HTTP/1.1" 200 2514 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/app.css HTTP/1.0" 200 758 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 2025/01/25 13:33:48 [warn] 30#30: *862 an upstream response is buffered to a temporary file /var/lib/nginx/tmp/proxy/1/01/0000000011 while reading upstream, client: 10.10.2.100, server: , request: "GET /static/vendor.css HTTP/1.0", upstream: "http://192.168.203.4:8080/static/vendor.css", host: "10.10.2.109", referrer: "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" front-1 | 2025/01/25 13:33:48 [warn] 30#30: *865 an upstream response is buffered to a temporary file /var/lib/nginx/tmp/proxy/2/01/0000000012 while reading upstream, client: 10.10.2.100, server: , request: "GET /static/vendor.js HTTP/1.0", upstream: "http://192.168.203.4:8080/static/vendor.js", host: "10.10.2.109", referrer: "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/vendor.css HTTP/1.0" 200 1333741 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/vendor.js HTTP/1.0" 200 586903 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/app.js HTTP/1.0" 200 11511 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/mailu.png HTTP/1.0" 200 4935 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/app.js HTTP/1.0" 304 0 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/fa-solid-900.woff2 HTTP/1.0" 200 78268 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" front-1 | 10.10.2.100 - - [25/Jan/2025:13:33:48 +0000] "GET /static/fa-regular-400.woff2 HTTP/1.0" 200 13224 "https://mail.REDACTED/sso/login?code=a7316148bc914b86b1c9dc412436c287&state=JoIpM4WDHm0uXJOg" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15"

Does that help you in any way?
we could talk about it in discord (i'm german) if you would like to.

[PaddyPat]

Same with pocketid

[murdantix]

I have the same problem, I use Shibboleth.

[Wombosvideo]

I face this issue too in my test environment. We are working on a fix to release as soon as possible. Given our limited resources, it might take a few days though.