Not able to integrate sso with new temporal ui

madhu · July 11, 2022, 12:47pm

Hi,

since the auth section / config map (helm) has been removed from the new UI,

I added the following environment varaibles to my deployment .

     - TEMPORAL_ADDRESS=temporal:7233
      - TEMPORAL_CORS_ORIGINS=http://localhost:3000
      - TEMPORAL_AUTH_ENABLED=true
      - TEMPORAL_AUTH_CALLBACK_URL=http://localhost:8098
      - TEMPORAL_AUTH_PROVIDER_URL=https://my-corp-authserverurl
      - TEMPORAL_AUTH_LABEL=my-corp-sso
      - TEMPORAL_AUTH_TYPE=oidc
      - TEMPORAL_AUTH_CLIENT_ID=temporal
      - TEMPORAL_AUTH_CLIENT_SECRET=someuuidsecret

With these settings i was successfuly able to get my self redirected to my sso server.
however after login, i see the page as blank.

From the authserver i am able to see that a ) session is establised/login happened, b)The redirect/callback url is validated correctly.

However, the new ui just shows a blank screen (no menus or workflow info loaded).

I check the log of temporal-ui, that too seesm to be clean.
In the browser network tab of developer tools too i do not see any broken urls (all 200s)

my screen after login looks something like this

This is what i see in my log


{"time":"2022-07-11T12:39:19.359056282Z","id":"45cad8d6ec13723ff8cf2afb0f23e67b","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/auth/sso?returnUrl=https%3A%2F%2Ftemporaui.mydomain.com","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":302,"error":"","latency":59781,"latency_human":"59.781µs","bytes_in":0,"bytes_out":0}
{"time":"2022-07-11T12:39:42.918466581Z","id":"5fcd850a7f52270ba31b5a24c8fc1ca3","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/?state=Y1wlQ4-_HVMOxmrWjlQaLg&session_state=efd1c721-e492-4c16-a3cc-08a72d58df6f&code=6d31c1c7-9b8a-4c31-8e6b-ff21640586fb.efd1c721-e492-4c16-a3cc-08a72d58df6f.49c499f5-8e7c-4515-b963-d63fe96b114a","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":29181,"latency_human":"29.181µs","bytes_in":0,"bytes_out":1124}
{"time":"2022-07-11T12:39:43.185946623Z","id":"cf64a62477731d01c88d76b6f4ea33b1","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/css/normalize.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":48081,"latency_human":"48.081µs","bytes_in":0,"bytes_out":1815}
{"time":"2022-07-11T12:39:43.187742422Z","id":"b20a92213d4f59e0965f2f4b8c1d72fd","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/css/override.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":37260,"latency_human":"37.26µs","bytes_in":0,"bytes_out":55}
{"time":"2022-07-11T12:39:43.187839103Z","id":"2791bf38a2f6fba313d53305959e155b","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/prism/prism.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":29390,"latency_human":"29.39µs","bytes_in":0,"bytes_out":1851}
{"time":"2022-07-11T12:39:43.187928454Z","id":"a8fb930eb4f7c8c1df1597fcbca30cf1","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/index-1da60d19.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":86121,"latency_human":"86.121µs","bytes_in":0,"bytes_out":15782}
{"time":"2022-07-11T12:39:43.187992505Z","id":"7523d061c2d3910e98409852518f8ee4","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/start-f1fa9bbd.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":156972,"latency_human":"156.972µs","bytes_in":0,"bytes_out":64689}
{"time":"2022-07-11T12:39:43.188082026Z","id":"69406500632c27f6cd6ad46c9feec382","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/index-6843fe21.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":86071,"latency_human":"86.071µs","bytes_in":0,"bytes_out":816}
{"time":"2022-07-11T12:39:43.188171627Z","id":"2444b69c8c5f525fefeb2c7cc3d01c6f","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/singletons-d1fb5791.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":54581,"latency_human":"54.581µs","bytes_in":0,"bytes_out":54}
{"time":"2022-07-11T12:39:43.188275718Z","id":"7349558b175ebe43738c28d9ceec83e9","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/prism/prism.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":77831,"latency_human":"77.831µs","bytes_in":0,"bytes_out":7865}
{"time":"2022-07-11T12:39:43.937067622Z","id":"576626a7e3bef3487c481d3d937d7d5f","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/layout.svelte-45d3da11.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":109971,"latency_human":"109.971µs","bytes_in":0,"bytes_out":542}
{"time":"2022-07-11T12:39:43.937161963Z","id":"357213f8ea34ad0ed087734428fae8e5","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/pages/__error.svelte-83f4938b.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":105031,"latency_human":"105.031µs","bytes_in":0,"bytes_out":1067}
{"time":"2022-07-11T12:39:43.937248524Z","id":"3bf4a27e39d2aaade7c75da5b83fe734","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/app-dec4fa86.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":98731,"latency_human":"98.731µs","bytes_in":0,"bytes_out":26936}
{"time":"2022-07-11T12:39:43.937254234Z","id":"4943e933c20adb8acd2396d6d723a25c","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/error-c8fecd8f.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":21190,"latency_human":"21.19µs","bytes_in":0,"bytes_out":44}
{"time":"2022-07-11T12:39:43.937261994Z","id":"d39fc3ebfe293e58a0e9e414d2a565ca","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/error-f393be45.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":71401,"latency_human":"71.401µs","bytes_in":0,"bytes_out":2744}
{"time":"2022-07-11T12:39:43.937701349Z","id":"91f7bda1c6ba080838bd9f77da039184","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/is-network-error-ac7c8caf.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":75251,"latency_human":"75.251µs","bytes_in":0,"bytes_out":163}
{"time":"2022-07-11T12:39:43.937761269Z","id":"675ac648f891533052b9a2f8c75dd9c7","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/navigation-6709cf39.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":64820,"latency_human":"64.82µs","bytes_in":0,"bytes_out":203}
{"time":"2022-07-11T12:39:43.93785361Z","id":"3b0bc38b5657e8ffcdcb5778ff773b55","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/stores-bed2f46e.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":52170,"latency_human":"52.17µs","bytes_in":0,"bytes_out":405}
{"time":"2022-07-11T12:39:43.940029194Z","id":"3429f7bb7248e288248b60f388642251","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/link-12a67bb2.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":76111,"latency_human":"76.111µs","bytes_in":0,"bytes_out":1290}
{"time":"2022-07-11T12:39:43.942602541Z","id":"e102c28e3b51302c77276369d17c73e4","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/pages/__layout-root.svelte-29c7943f.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":237582,"latency_human":"237.582µs","bytes_in":0,"bytes_out":12912}
{"time":"2022-07-11T12:39:43.94999258Z","id":"0f6c6a7763a975e5c7f065f3b81bcec9","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/pages/__layout-root.svelte-ebae0a9f.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":44310,"latency_human":"44.31µs","bytes_in":0,"bytes_out":482}
{"time":"2022-07-11T12:39:43.950272173Z","id":"2ae7e49e10de6d44e8ad455244884e47","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/get-namespace-d07a8a35.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":211512,"latency_human":"211.512µs","bytes_in":0,"bytes_out":482}
{"time":"2022-07-11T12:39:44.658546924Z","id":"a93f6511c40a03d5f6891d62ebf6d79a","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/_nav-row-3cbe0b52.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":96751,"latency_human":"96.751µs","bytes_in":0,"bytes_out":2677}
{"time":"2022-07-11T12:39:44.658577164Z","id":"1b87ba7f2abc46bc9f559d147d5c04cc","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/tooltip-755a4257.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":48291,"latency_human":"48.291µs","bytes_in":0,"bytes_out":2150}
{"time":"2022-07-11T12:39:44.658686545Z","id":"53b0f3be5c8db676a05ff81a266904dc","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/version-check-a69e2186.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":105621,"latency_human":"105.621µs","bytes_in":0,"bytes_out":209}
{"time":"2022-07-11T12:39:44.658720155Z","id":"8a4860e87760020a661e32b0d8df32c7","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/feature-tag.svelte_svelte_type_style_lang-458a4e76.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":36770,"latency_human":"36.77µs","bytes_in":0,"bytes_out":577}
{"time":"2022-07-11T12:39:44.658688045Z","id":"7ec864f22255f01c1e57abb1ce605c0d","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/modal-3a862776.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":39140,"latency_human":"39.14µs","bytes_in":0,"bytes_out":1294}
{"time":"2022-07-11T12:39:44.658784836Z","id":"2e0c5da17d09880acdd10340401601fa","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/button-b0ff7a2e.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":44830,"latency_human":"44.83µs","bytes_in":0,"bytes_out":3217}
{"time":"2022-07-11T12:39:44.658877887Z","id":"6648719a37463ec9a995e5505059b3b4","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/error-boundary-f3cc63ec.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":36290,"latency_human":"36.29µs","bytes_in":0,"bytes_out":874}
{"time":"2022-07-11T12:39:44.658984548Z","id":"bc5e84304cb1d1b36e7102425b00d2c0","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/route-for-ef692dd7.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":105621,"latency_human":"105.621µs","bytes_in":0,"bytes_out":2289}
{"time":"2022-07-11T12:39:44.6591031Z","id":"402b72b0a97de10cf40c26235f3d0f30","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/pages/_header.svelte-abd51030.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":121551,"latency_human":"121.551µs","bytes_in":0,"bytes_out":3977}
{"time":"2022-07-11T12:39:44.659204091Z","id":"0c192ee595dfb6d1c67f9f52b0f9397d","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/route-for-api-e0dd5afe.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":116832,"latency_human":"116.832µs","bytes_in":0,"bytes_out":3938}
{"time":"2022-07-11T12:39:44.659371502Z","id":"044c8efc633b21c4259d46e0204d206b","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/badge-4393dd03.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":36740,"latency_human":"36.74µs","bytes_in":0,"bytes_out":1197}
{"time":"2022-07-11T12:39:44.659499144Z","id":"52f8ec0ef6417023b88cfb12874b0d0f","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/error-boundary-577bc1e7.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":183482,"latency_human":"183.482µs","bytes_in":0,"bytes_out":7579}
{"time":"2022-07-11T12:39:44.663372155Z","id":"39f2e24d8d05038729ab26aa4199d0f0","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/empty-state-3e8347d9.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":135681,"latency_human":"135.681µs","bytes_in":0,"bytes_out":2290}
{"time":"2022-07-11T12:39:44.663622618Z","id":"f84338c60898b4cc1d0293f804857cf6","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/tooltip-91189a24.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":327924,"latency_human":"327.924µs","bytes_in":0,"bytes_out":4616}
{"time":"2022-07-11T12:39:44.663647268Z","id":"f92510032fd8814a343fdbf7d968bc54","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/is-http-3ee99468.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":254553,"latency_human":"254.553µs","bytes_in":0,"bytes_out":335}
{"time":"2022-07-11T12:39:44.663886611Z","id":"4a02f92395a51bda40adb878e066286d","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/data-encoder-status-931dba77.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":126522,"latency_human":"126.522µs","bytes_in":0,"bytes_out":17630}
{"time":"2022-07-11T12:39:44.663704169Z","id":"71363289ca39c715289fb0874c18eb31","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/namespaces-77c6b00e.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":59571,"latency_human":"59.571µs","bytes_in":0,"bytes_out":101}
{"time":"2022-07-11T12:39:44.664084483Z","id":"43d56d89014ca2b4a3f6c52d6d035154","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/pages/index@root.svelte-3361897a.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":70611,"latency_human":"70.611µs","bytes_in":0,"bytes_out":489}
{"time":"2022-07-11T12:39:44.664273065Z","id":"ffb80dbb5011e3934ae0f6f642002b54","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/copy-to-clipboard-4893348d.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":63901,"latency_human":"63.901µs","bytes_in":0,"bytes_out":273}
{"time":"2022-07-11T12:39:44.664301725Z","id":"6665c82f3f6c1166776e583755a4b66b","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/modal-de829d7d.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":103041,"latency_human":"103.041µs","bytes_in":0,"bytes_out":4426}
{"time":"2022-07-11T12:39:44.664478367Z","id":"3d7123a12fa32e1785e8286653bfc7a4","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/badge-8b9f8ded.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":56641,"latency_human":"56.641µs","bytes_in":0,"bytes_out":1111}
{"time":"2022-07-11T12:39:44.664711189Z","id":"c92ef137b5a1aebab568baa46d16f997","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/data-converter-config-8eec1cd7.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":64080,"latency_human":"64.08µs","bytes_in":0,"bytes_out":247}
{"time":"2022-07-11T12:39:44.664962512Z","id":"fbdf3dcafebe93917b9b779a719e92e1","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/index-ad10ae27.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":127971,"latency_human":"127.971µs","bytes_in":0,"bytes_out":2659}
{"time":"2022-07-11T12:39:44.665243395Z","id":"a81137115fe80f26fc0eac10aed840e1","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/feature-tag-23a37d1b.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":58251,"latency_human":"58.251µs","bytes_in":0,"bytes_out":1532}
{"time":"2022-07-11T12:39:44.665346916Z","id":"3ddf71627c425e3ec714cfb8177d176b","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/pages/_header.svelte-3bbdfc50.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":206732,"latency_human":"206.732µs","bytes_in":0,"bytes_out":31215}
{"time":"2022-07-11T12:39:44.665538148Z","id":"7a8d668b30c4622d81baeb6e33718f4d","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/persist-store-f0d328df.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":63821,"latency_human":"63.821µs","bytes_in":0,"bytes_out":546}
{"time":"2022-07-11T12:39:44.665824681Z","id":"45b946ca7bbadb1ccfaaf20690e96646","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/settings-6c50d1a6.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":87461,"latency_human":"87.461µs","bytes_in":0,"bytes_out":305}
{"time":"2022-07-11T12:39:44.665823241Z","id":"55cb1a9f49eb4d9d61bb8b298974317e","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/button-bb025b66.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":2062842,"latency_human":"2.062842ms","bytes_in":0,"bytes_out":6401}
{"time":"2022-07-11T12:39:44.666163165Z","id":"b66e8c3da541dfb5aeb431b71d3bcedf","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/is-function-b969a126.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":66741,"latency_human":"66.741µs","bytes_in":0,"bytes_out":48}
{"time":"2022-07-11T12:39:44.666411117Z","id":"4f86ff9daf1ef640be46b6374b816fe8","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/feature-tag.svelte_svelte_type_style_lang-dc53befa.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":237152,"latency_human":"237.152µs","bytes_in":0,"bytes_out":218}
{"time":"2022-07-11T12:39:44.66662902Z","id":"0505fed05e416f12f73b982fcd7bae3e","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/_nav-row-76dade15.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":178232,"latency_human":"178.232µs","bytes_in":0,"bytes_out":8230}
{"time":"2022-07-11T12:39:44.666875292Z","id":"43d8521e81ebeb836da5d29af3fab3ae","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/copyable-f967cb90.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":119971,"latency_human":"119.971µs","bytes_in":0,"bytes_out":2425}
{"time":"2022-07-11T12:39:44.665981283Z","id":"a8ea07a93dbdcd63f2b48a14d12da8c6","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/nav-open-0303efdd.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":502096,"latency_human":"502.096µs","bytes_in":0,"bytes_out":141}
{"time":"2022-07-11T12:39:44.667202576Z","id":"6c064d4da1230aeba392d3a7d4032b4a","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/settings-service-0698b0c5.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":116641,"latency_human":"116.641µs","bytes_in":0,"bytes_out":1195}
{"time":"2022-07-11T12:39:44.66760027Z","id":"83e72198a471f8612fe551be1246d293","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/index-c656f9dc.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":354204,"latency_human":"354.204µs","bytes_in":0,"bytes_out":25789}
{"time":"2022-07-11T12:39:44.667746402Z","id":"5d9de73c07f22377bb3e4d44678b30e3","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/notifications-121124a6.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":1579027,"latency_human":"1.579027ms","bytes_in":0,"bytes_out":549}
{"time":"2022-07-11T12:39:45.592790163Z","id":"c0af6a5f304fa2a7adf09d4ce942933a","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/api/v1/settings?","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":43811,"latency_human":"43.811µs","bytes_in":0,"bytes_out":208}
{"time":"2022-07-11T12:39:45.82621279Z","id":"d8ff72df29eea0a9ab7f7b6575c65bdb","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/api/v1/me?","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":39470,"latency_human":"39.47µs","bytes_in":0,"bytes_out":5}
{"time":"2022-07-11T12:39:46.061822702Z","id":"3bc27b6544acb03423212a723e0da44e","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/assets/hamburger-header-e605fa6e.css","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":62090,"latency_human":"62.09µs","bytes_in":0,"bytes_out":2535}
{"time":"2022-07-11T12:39:46.061829762Z","id":"55a0510a856281d1595cb1b8486cd3d8","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/pages/login/__layout-login.svelte-21923d6b.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":58570,"latency_human":"58.57µs","bytes_in":0,"bytes_out":583}
{"time":"2022-07-11T12:39:46.061972644Z","id":"b3d75281dac400b4c124519f071b7a9c","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/chunks/hamburger-header-11544101.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":109031,"latency_human":"109.031µs","bytes_in":0,"bytes_out":7542}
{"time":"2022-07-11T12:39:46.061945634Z","id":"c507c8bca9ab6c4a29ef5ac85138ff0c","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/_app/pages/login/index@login.svelte-76c0ad87.js","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":52991,"latency_human":"52.991µs","bytes_in":0,"bytes_out":3273}
{"time":"2022-07-11T12:39:46.302399467Z","id":"18b4ba8e0d20434192b21820d1190c6d","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/api/v1/settings?","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":40380,"latency_human":"40.38µs","bytes_in":0,"bytes_out":208}
{"time":"2022-07-11T12:39:46.552669386Z","id":"a185316c396c1eaf12c83ddaf7de71ec","remote_ip":"106.xxx.yyy.zzz","host":"temporaui.mydomain.com","method":"GET","uri":"/logo.svg","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 Edg/103.0.1264.49","status":200,"error":"","latency":42621,"latency_human":"42.621µs","bytes_in":0,"bytes_out":1527}

I see no error in the nextwork tabs too… (firefox)

In microsoft edge alone i see this script error.

Am i missing some additional configurations/ env variable etc?
This same is workfing perfectly fine in old Web ui.

madhu · July 11, 2022, 1:01pm

in mozilla i do not see any js error, but the page do appear blank like like in edge/chrome

steve · July 11, 2022, 1:15pm

@Ruslan, can you look into this?

Ruslan · July 11, 2022, 3:23pm

what UI version are you using?

madhu · July 11, 2022, 4:47pm

i am using temporal helm chart version: 1.17.0
the helm values mentions temporal-ui version as latest… so it got to be 2.0.18 i guess…

sumesh_kanayi · July 11, 2022, 5:42pm

i too facing the same issue as you can see here New temporal UI in login loop for sometime now ,temporal ui -v2.0.18 ,ui-server v2.2.0

Ruslan · July 11, 2022, 8:32pm

after going through the login process once do you see auth and auth_extras tokens set when you open your browser’s Dev Tools and then Application Cookies? If yes, please also let me know what are their sizes in bytes (shown in of the the columns)

What does the me network call return in your browser’s Network tab?

Is there a way you could verify that your Auth provider returns user email name and picture? I believe email is currently required for the UI to consider authentication as successful though i want to remove this requirement

madhu · July 12, 2022, 5:14am

i see only _csrf, no auth or auth extra,

like wise i see null as the response of /me call in network tab ( response code 200)

The oauth provider returns email, firstname, lastname and username for sure.

The token response size typically is 1.51KB (access token size), the entire oauth response size acecss token + refersh token + other info is about 3.2KB ( i checked ith through postman/direct outh calls to my server)

madhu · July 12, 2022, 5:46am

Between, should i set value for TEMPORAL_CORS_ORIGINS ? if so to what?

Ruslan · July 12, 2022, 8:17pm

unless you serve UI frontend under a different origin than ui-server/API you don’t have to care about TEMPORAL_CORS_ORIGINS and can go with the default value. If the origin is different though, for example you serve the UI at http://localhost:3000, then you set TEMPORAL_CORS_ORIGINS to this value

Auth issue:
what is your auth provider? Auth0, Google, Apple Connect, Keycloak something else?

sumesh_kanayi · July 13, 2022, 6:14am

I tried with with both auth0 as well as hashicorp vault OIDC

sumesh_kanayi · July 13, 2022, 9:38am

I can confirm that the auth provider is returning the token but dont see it getting saved after

github.com

temporalio/ui-server/blob/main/server/auth/auth.go#L157


      
          	}
          
          
	return "Bearer " + cToken.(string)
          }
          
          
func setAccessToken(c echo.Context, token string) error {
          	sess, _ := session.Get(AuthCookie, c)
          	sess.Options = sessOpts
          	sess.Values[AccessTokenKey] = &token
          
          
	err := sess.Save(c.Request(), c.Response())
          	if err != nil {
          		return err
          	}
          
          
	return nil
          }
          
          
func getAuthorizationExtras(c echo.Context) string {
          	sess, _ := session.Get(AuthExtrasCookie, c)
          	if sess == nil {

github.com

temporalio/ui-server/blob/main/server/auth/auth.go#L188


      
          
          
func setIDToken(c echo.Context, idToken *IDToken) error {
          	sess, _ := session.Get(AuthExtrasCookie, c)
          	sess.Options = sessOpts
          
          
	sess.Values[EmailKey] = &idToken.Claims.Email
          	sess.Values[PictureKey] = &idToken.Claims.Picture
          	sess.Values[NameKey] = &idToken.Claims.Name
          	sess.Values[IDTokenKey] = &idToken.RawToken
          
          
	err := sess.Save(c.Request(), c.Response())
          	if err != nil {
          		return err
          	}
          
          
	return nil
          }

I can see that the struct is filled with the token but not getting saved in to the browser cookie

eventually getAccessToken and getIDToken returns empty .Observing something similar to this Browser caching session cookie · Discussion #2152 · labstack/echo · GitHub

sumesh_kanayi · July 13, 2022, 10:16am

For testing I replaced setAccessToken method as below and can see that its saving the cookie now .(Just for testing)



func setAccessToken(c echo.Context, token string) error {
	aToken = ""
	cookie := new(http.Cookie)
	cookie.Name = "access-token"
	cookie.Value = token
	// Http-only helps mitigate the risk of client side script accessing the protected cookie.
	cookie.HttpOnly = true

	c.SetCookie(cookie)

	cookie = new(http.Cookie)
	cookie.Name = "id-token"
	cookie.Value = token
	// Http-only helps mitigate the risk of client side script accessing the protected cookie.
	cookie.HttpOnly = true

	c.SetCookie(cookie)

	return nil
}

Ruslan · July 13, 2022, 3:33pm

@sumesh_kanayi what is the resulting cookie size of your access-token?

sumesh_kanayi · July 14, 2022, 9:39am

it shows 474 bytes

Ruslan · July 15, 2022, 4:55pm

@sumesh_kanayi to confirm you still see _csrf cookie set right?

i’m making few changes to how auth tokens are stored (mem or filestore instead of cookie) plus also looking to remove email/etc requirements

If there is still an issue with auth we can set up a zoom call and debug live your auth setup (to both Madhu and Sumesh)

sumesh_kanayi · July 19, 2022, 8:17am

@Ruslan yes you are right. sure please let us know when ever its ready for testing

sumesh_kanayi · July 27, 2022, 11:58am

@Ruslan i tried the file system based session storage but after speaking to one of my colleague (Bruce Smith) figured out that its due to SameSite: http.SameSiteSecureMode, and secure: true. I made it to SameSite: http.SameSiteLaxMode, and secure: false and it worked

madhu · August 4, 2022, 8:14am

sorry i did not understand correctly, is there a new build which we can try? or is it some config we got to apply some where to make it work?

madhu · August 17, 2022, 2:53pm

@Ruslan , would it be possible to priortize this issue in upcoming release?
I am not able to use the new ui, becase of this issue unfortunately.

Topic		Replies	Views
Sso with new temporal ui is not working Community Support helm , web-ui	4	2345	June 14, 2024
Web-UI Log Out Not Working Community Support web-ui	0	18	October 5, 2024
How to configure SSO for temporal in helm chart Community Support helm	44	4088	July 3, 2024
Web UI SSO with Azure AD - not working Community Support web-ui , sso	6	1441	May 16, 2024
Ui Beta, keeps redirecting to login page Community Support web-ui	8	863	December 18, 2022

Not able to integrate sso with new temporal ui

Related topics