Error while trying to Authenticate with Custom Provider(Wso2 Identity Server)

[DimuthuKasunWP]

Question 💬

WSO2 Identity server comes with a self-signed certificate and when I try to authenticate with the WSO2 Identity server provider it shows the following error :

[next-auth][error][GET_AUTHORIZATION_URL_ERROR] 
https://next-auth.js.org/errors#get_authorization_url_error self-signed certificate {
  message: 'self-signed certificate',
  stack: 'Error: self-signed certificate\n' +
    '    at TLSSocket.onConnectSecure (node:_tls_wrap:1530:34)\n' +
    '    at TLSSocket.emit (node:events:390:28)\n' +
    '    at TLSSocket.emit (node:domain:475:12)\n' +
    '    at TLSSocket._finishInit (node:_tls_wrap:944:8)\n' +
    '    at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:725:12)',
  name: 'Error'
}
[next-auth][error][SIGNIN_OAUTH_ERROR] 
https://next-auth.js.org/errors#signin_oauth_error self-signed certificate {
  error: {
    message: 'self-signed certificate',
    stack: 'Error: self-signed certificate\n' +
      '    at TLSSocket.onConnectSecure (node:_tls_wrap:1530:34)\n' +
      '    at TLSSocket.emit (node:events:390:28)\n' +
      '    at TLSSocket.emit (node:domain:475:12)\n' +
      '    at TLSSocket._finishInit (node:_tls_wrap:944:8)\n' +
      '    at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:725:12)',
    name: 'Error'
  },
  provider: {
    id: 'wso2is',
    name: 'WSO2IS',
    clientId: '<client_id>',
    clientSecret: '<client_secret>',
    type: 'oauth',
    wellKnown: 'https://127.0.0.1:9443/oauth2/token/.well-known/openid-configuration',
    authorization: { params: [Object] },
    idToken: true,
    checks: [ 'pkce', 'state' ],
    profile: [Function: profile],
    signinUrl: 'http://localhost:3000/api/auth/signin/wso2is',
    callbackUrl: 'http://localhost:3000/api/auth/callback/wso2is'
  },
  message: 'self-signed certificate'
}

How to reproduce ☕️

• Download wso2 identity server version 5.11.0 from the website
• create a new service provider.
• configure wso2 identity server as a custom provider

{
      id: "wso2is",
      name: "WSO2IS",
      clientId: process.env.WSO2IS_CLIENT_ID,
      clientSecret: process.env.WSO2IS_CLIENT_SECRET,
      type: "oauth",
      wellKnown: process.env.WSO2IS_HOST + "/oauth2/token/.well-known/openid-configuration",
      authorization: { params: { scope: process.env.WSO2IS_SCOPES } },
      idToken: true,
      checks: ["pkce", "state"],
      profile(profile) {
        return {
          id: profile.sub,
          name: profile.name,
          email: profile.email,
        }
      },
    },

• try to login to a next js application

Contributing 🙌🏽

No, I am afraid I cannot help regarding this

[markharwood101]

Did you ever find a solution to this, I am getting the same issue with Duende Identity Server 6

[untungso]

I am able to bypass this for local development by adding "NODE_TLS_REJECT_UNAUTHORIZED='0' command for before doing the 'next dev' so it ignore the self sign error

[seanbruce]

I'm getting the same issue when working with auth server build on .net platform.

[Erion14]

Have you come up with a fix in this yet?