My bad, I missed it. Kopano connect is throwing error. Please refer the trail. How do I resolve it?
docker-compose logs -f --tail=10 web
Attaching to kopano_web
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:27:33 +0000] "GET /meet/static/media/roboto-latin-700italic.010c1aee.woff2?__WB_REVISION__=010c1aeee3c6d1cbb1d5761d80353823 HTTP/1.1" 200 16572
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:27:33 +0000] "GET /meet/index.html?__WB_REVISION__=3c4f6a0f79bcc8f180d5d3c905e27d0c HTTP/1.1" 200 666
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:07 +0000] "GET /meetid/konnect/v1/jwks.json HTTP/1.1" 200 701
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:14 +0000] "GET /.well-known/openid-configuration HTTP/1.1" 200 531
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:14 +0000] "GET /meetid/konnect/v1/jwks.json HTTP/1.1" 200 701
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:19 +0000] "GET /.well-known/openid-configuration HTTP/1.1" 200 531
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:35 +0000] "GET /meetid/konnect/v1/session/check-session.html HTTP/1.1" 200 3031
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:35 +0000] "POST /api/kwm/v2/guest/logon HTTP/1.1" 400 43
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:35 +0000] "GET /meetid/signin/v1/identifier/_/authorize?client_id=kpop-https%3A%2F%2Fdigital.quadridge.com%2Fmeet%2F&redirect_uri=https%3A%2F%2Fdigital.quadridge.com%2Fmeet%2F%23oidc-popup-callback&response_type=code&scope=openid%20profile%20email%20kopano%2Fkwm%20kopano%2Fgc%20kopano%2Fkvs&state=f887c8d361784ef8811e7e6f75215565&code_challenge=ofSv-1yBorP8xOChjxTFyiokyMeKP2LDqIDrCJ2SxP8&code_challenge_method=S256&prompt=select_account&display=popup&response_mode=fragment&claims=%7B%22id_token%22%3A%7B%22name%22%3Anull%7D%7D HTTP/1.1" 302 23
kopano_web | 172.20.0.1 - - [11/Sep/2020:09:28:35 +0000] "GET /meetid/signin/v1/identifier?claims=%7B%22id_token%22%3A%7B%22name%22%3Anull%7D%7D&client_id=kpop-https%3A%2F%2Fdigital.quadridge.com%2Fmeet%2F&code_challenge=ofSv-1yBorP8xOChjxTFyiokyMeKP2LDqIDrCJ2SxP8&code_challenge_method=S256&display=popup&flow=oidc&prompt=select_account&redirect_uri=https%3A%2F%2Fdigital.quadridge.com%2Fmeet%2F%23oidc-popup-callback&response_mode=fragment&response_type=code&scope=openid+profile+email+kopano%2Fkwm+kopano%2Fgc+kopano%2Fkvs&state=f887c8d361784ef8811e7e6f75215565 HTTP/1.1" 302 23
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="set provider signing alg" alg=PS256
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="set provider signing key" id=konnectd-tokens-signing-key method="*jwt.SigningMethodRSAPSS" type="*rsa.PrivateKey"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="set provider validation key" id=konnectd-tokens-signing-key type="*rsa.PublicKey"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="set provider validation key" id=default type="*rsa.PublicKey"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="oidc token signing default set up" alg=PS256 id=konnectd-tokens-signing-key method="*jwt.SigningMethodRSAPSS"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="serve started"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="starting http listener" listenAddr="0.0.0.0:8777"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="ready to handle requests"
kopano_konnect | time="2020-09-11T07:11:10Z" level=info msg="authority is now ready" id=ucs-konnect type=oidc
kopano_konnect | time="2020-09-11T09:22:39Z" level=error msg="error while oidc provider update: oidc provider error: failed to fetch discover document: failed to fetch JSON: Get \"https://digital.quadridge.com/.well-known/openid-configuration\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" id=ucs-konnect type=oidc
kopano/docker/FQDN_MEET: digital.quadridge.com
kopano/docker/FQDN_SSO: digital.quadridge.com
kopano/docker/GRID_WEBAPP: no
kopano/docker/INSECURE: no
kopano/docker/MEET_GUEST_ALLOW: yes
kopano/docker/MEET_GUEST_REGEXP: ^group/public/.*
kopano/docker/TURN_SERVICE_URL: https://ucs-turn.kopano.com/turnserverauth/
kopano/docker/TURN_USER: xxxxxxxxxxxx
curl $(ucr get oidc/konnectd/issuer_identifier)/signin/v1/welcome
<!doctype html><html lang="en"><head data-kopano-build="0.33.3"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#ffffff"><link rel="shortcut icon" href="./static/favicon.ico" type="image/x-icon"><meta property="csp-nonce" content="ZmDav8HoFhUK-AwR9ELKCm_7sr_useG8rP_iTQLipB0="><title>Kopano Sign in</title><link href="./static/css/main.1c108bb6.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="bg"><div id="bg-thumb"></div><div id="bg-enhanced"></div></div><div id="root" data-path-prefix="/signin/v1"></div><div id="font-preloader"><span>aA</span>Bb</div><script src="./static/js/runtime-main.be062ff5.js"></script><script src="./static/js/main.55b1b7f2.chunk.js"></script></body></html>
curl https://$(ucr get kopano/docker/FQDN_SSO)/signin/v1/welcome
<!doctype html><html lang="en"><head data-kopano-build="0.33.3"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#ffffff"><link rel="shortcut icon" href="./static/favicon.ico" type="image/x-icon"><meta property="csp-nonce" content="8btZvqtPttd6WlEOCmRg2uUn8uXaxnJW412GmIueJuU="><title>Kopano Sign in</title><link href="./static/css/main.1c108bb6.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="bg"><div id="bg-thumb"></div><div id="bg-enhanced"></div></div><div id="root" data-path-prefix="/signin/v1"></div><div id="font-preloader"><span>aA</span>Bb</div><script src="./static/js/runtime-main.be062ff5.js"></script><script src="./static/js/main.55b1b7f2.chunk.js"></script></body></html>
/etc/kopano/docker/konnectd-identifier-registration.yaml
clients:
- id: kpop-https://digital.quadridge.com/meet/
name: Kopano Meet
application_type: web
trusted: true
redirect_uris:
- https://digital.quadridge.com/meet/
trusted_scopes:
- konnect/guestok
- kopano/kwm
jwks:
keys:
- kty: EC
use: sig
crv: P-256
d: sdfsdf
kid: meet-kwmserver
x: sdfsdf
y: sdfsdfsd
request_object_signing_alg: ES256
authorities:
- name: ucs-konnect
default: true
iss: https://digital.quadridge.com
client_id: kopano-meet
authority_type: oidc
response_type: id_token
scopes:
- openid
- profile
- email
trusted: true
end_session_enabled: true
curl $(ucr get oidc/konnectd/issuer_identifier)/.well-known/openid-configuration
{
"issuer": "https://digital.quadridge.com",
"authorization_endpoint": "https://digital.quadridge.com/signin/v1/identifier/_/authorize",
"token_endpoint": "https://digital.quadridge.com/konnect/v1/token",
"userinfo_endpoint": "https://digital.quadridge.com/konnect/v1/userinfo",
"end_session_endpoint": "https://digital.quadridge.com/signin/v1/identifier/_/endsession",
"check_session_iframe": "https://digital.quadridge.com/konnect/v1/session/check-session.html",
"jwks_uri": "https://digital.quadridge.com/konnect/v1/jwks.json",
"scopes_supported": [
"openid",
"offline_access",
"profile",
"email",
"konnect/uuid",
"konnect/raw_sub"
],
"response_types_supported": [
"id_token token",
"id_token",
"code id_token",
"code id_token token"
],
"subject_types_supported": [
"public"
],
"id_token_signing_alg_values_supported": [
"RS512",
"PS256",
"PS384",
"PS512",
"RS256",
"RS384"
],
"userinfo_signing_alg_values_supported": [
"RS512",
"PS256",
"PS384",
"PS512",
"RS256",
"RS384"
],
"request_object_signing_alg_values_supported": [
"ES256",
"ES384",
"ES512",
"RS256",
"RS384",
"RS512",
"PS256",
"PS384",
"PS512",
"none",
"EdDSA"
],
"token_endpoint_auth_methods_supported": [
"client_secret_basic",
"none"
],
"token_endpoint_auth_signing_alg_values_supported": [
"RS512",
"PS256",
"PS384",
"PS512",
"RS256",
"RS384"
],
"claims_parameter_supported": true,
"claims_supported": [
"iss",
"sub",
"aud",
"exp",
"iat",
"name",
"family_name",
"given_name",
"email",
"email_verified"
],
"request_parameter_supported": true,
"request_uri_parameter_supported": false
}
