mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-07-16 05:33:49 +03:00
Invalid Client after Secret Expired #5406
Closed
opened 2026-02-05 10:02:34 +03:00 by OVERLORD
·
5 comments
No Branch/Tag Specified
development
l10n_development
release
snyk-action
ci_and_static
mfa_key
phpstan_june26
MilnerMart/development
GamerClassN7/impersonations-for-admin
Zhey-on/feature/csp-image-css-controls-6033
tortillas5/development
llm_only
vectors
McTom234/oidc-key-algorithms
captcha_example
v26.05.2
v26.05.1
v26.05
v26.03.5
v26.03.4
v26.03.3
v26.03.2
v26.03.1
v26.03
v25.12.9
v25.12.8
v25.12.7
v25.12.6
v25.12.5
v25.12.4
v25.12.3
v25.12.2
v25.12.1
v25.12
v25.11.6
v25.11.5
v25.11.4
v24.11.4
v25.11.3
v25.11.2
v25.11.1
v25.11
v25.07.3
v25.07.2
v25.07.1
v25.07
v25.05.2
v25.05.1
v25.05
v25.02.5
v25.02.4
v25.02.3
v25.02.2
v25.02.1
v25.02
v24.12.1
v24.12
v24.10.3
v24.10.2
v24.10.1
v24.10
v24.05.4
v24.05.3
v24.05.2
v24.05.1
v24.05
v24.02.3
v24.02.2
v24.02.1
v24.02
v23.12.3
v23.12.2
v23.12.1
v23.12
v23.10.4
v23.10.3
v23.10.2
v23.10.1
v23.10
v23.08.3
v23.08.2
v23.08.1
v23.08
v23.06.2
v23.06.1
v23.06
v23.05.2
v23.05.1
v23.05
v23.02.3
v23.02.2
v23.02.1
v23.02
v23.01.1
v23.01
v22.11.1
v22.11
v22.10.2
v22.10.1
v22.10
v22.09.1
v22.09
v22.07.3
v22.07.2
v22.07.1
v22.07
v22.06.2
v22.06.1
v22.06
v22.04.2
v22.04.1
v22.04
v22.03.1
v22.03
v22.02.3
v22.02.2
v22.02.1
v22.02
v21.12.5
v21.12.4
v21.12.3
v21.12.2
v21.12.1
v21.12
v21.11.3
v21.11.2
v21.11.1
v21.11
v21.10.3
v21.10.2
v21.10.1
v21.10
v21.08.6
v21.08.5
v21.08.4
v21.08.3
v21.08.2
v21.08.1
v21.08
v21.05.4
v21.05.3
v21.05.2
v21.05.1
v21.05
v21.04.6
v21.04.5
v21.04.4
v21.04.3
v21.04.2
v21.04.1
v21.04
v0.31.8
v0.31.7
v0.31.6
v0.31.5
v0.31.4
v0.31.3
v0.31.2
v0.31.1
v0.31.0
v0.30.7
v0.30.6
v0.30.5
v0.30.4
v0.30.3
v0.30.2
v0.30.1
v0.30.0
v0.29.3
v0.29.2
v0.29.1
v0.29.0
v0.28.3
v0.28.2
v0.28.1
v0.28.0
v0.27.5
v0.27.4
v0.27.3
v0.27.2
v0.27.1
v0.27
v0.26.4
v0.26.3
v0.26.2
v0.26.1
v0.26.0
v0.25.5
v0.25.4
v0.25.3
v0.25.2
v0.25.1
v0.25.0
v0.24.3
v0.24.2
v0.24.1
v0.24.0
v0.23.2
v0.23.1
v0.23.0
v0.22.0
v0.21.0
v0.20.3
v0.20.2
v0.20.1
v0.20.0
v0.19.0
v0.18.5
v0.18.4
v0.18.3
v0.18.2
v0.18.1
v0.18.0
v0.17.4
v0.17.3
v0.17.2
v0.17.1
v0.17.0
v0.16.3
v0.16.2
v0.16.1
v0.16.0
v0.15.3
v0.15.2
v0.15.1
v0.15.0
v0.14.3
v0.14.2
v0.14.1
v0.14.0
v0.13.1
v0.13.0
v0.12.2
v0.12.1
v0.12.0
v0.11.2
v0.11.1
v0.11.0
v0.10.0
v0.9.3
v0.9.2
v0.9.1
v0.9.0
v0.8.2
v0.8.1
v0.8.0
v0.7.6
v0.7.5
v0.7.4
v0.7.3
0.7.2
v.0.7.1
v0.7.0
v0.6.3
v0.6.2
v0.6.1
v0.6.0
v0.5.0
Labels
Clear labels
🎨 Design
📖 Docs Update
🐛 Bug
🐛 Bug
:cat2:🐈 Possible duplicate
💿 Database
☕ Open to discussion
💻 Front-End
🐕 Support
🚪 Authentication
🌍 Translations
🔌 API Task
🏭 Back-End
⛲ Upstream
🔨 Feature Request
🛠️ Enhancement
🛠️ Enhancement
🛠️ Enhancement
❤️ Happy feedback
🔒 Security
🔍 Pending Validation
💆 UX
📝 WYSIWYG Editor
🌔 Out of scope
🔩 API Request
:octocat: Admin/Meta
🖌️ View Customization
❓ Question
🚀 Priority
🛡️ Blocked
🚚 Export System
♿ A11y
🔧 Maintenance
> Markdown Editor
pull-request
Mirrored from GitHub Pull Request
No Label
🐕 Support
Milestone
No items
No Milestone
Projects
Clear projects
No project
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: starred/BookStack#5406
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @BartNSTCL on GitHub (Aug 22, 2025).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
I was getting the 'Unknown Error Occurred" and after some checking of the debug info and some listed issues here, I checked and my App Registration had expired 8/16/2025. I created a new secret, edited the .env file, saved and restarted Apache. I'm still getting the error. According to the laravel.log, its erroring out at line 91 of OidcOAuthProvider.php with IdentityProviderException(code: 401): invalid_client. I confirmed the Client ID in the App Registration is the same as the one in the .env. Just not sure what could have changed if only replacing the Secret value
Exact BookStack Version
v24.05
Log Content
Hosting Environment
Ubuntu 22.04.4 LTS
@ssddanbrown commented on GitHub (Aug 23, 2025):
Hi @BartNSTCL,
ls -alh /var/www/bookstack/bootstrap/cacheon this system?@BartNSTCL commented on GitHub (Aug 24, 2025):
I’m off till Monday morning so give me till then to check. I remember something about special characters on some issue but I don’t know the what the characters are till I’m back in the office
Bart Lynn
Level 2 Technician
Nucor Steel Tuscaloosa, Inc.
1700 Holt Road N.E. • Tuscaloosa, AL 35404
Phone: 205.562.1340
Sales: 205.562.1310
Cell: 205.454.5245
@.***
From: Dan Brown @.>
Sent: Saturday, August 23, 2025 12:56:40 PM
To: BookStackApp/BookStack @.>
Cc: Lynn, Bart (NSTCL) @.>; Mention @.>
Subject: [EXT] Re: [BookStackApp/BookStack] Invalid Client after Secret Expired (Issue #5771)
This message came from outside of Nucor.
[https://avatars.githubusercontent.com/u/8343178?s=20&v=4]ssddanbrown left a comment (BookStackApp/BookStack#5771)https://github.com/BookStackApp/BookStack/issues/5771#issuecomment-3217225748
Hi @BartNSTCLhttps://github.com/BartNSTCL,
—
Reply to this email directly, view it on GitHubhttps://github.com/BookStackApp/BookStack/issues/5771#issuecomment-3217225748, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BB6P7PDJDHCWULDMG3CRXLD3PCTNRAVCNFSM6AAAAACER5WDACVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTEMJXGIZDKNZUHA.
You are receiving this because you were mentioned.Message ID: @.***>
CONFIDENTIALITY NOTICE
This e-mail contains privileged and confidential information, which is the property of Nucor, intended only for the use of the intended recipient(s). Unauthorized use or disclosure of this information is prohibited. If you are not an intended recipient, please immediately notify Nucor and destroy any copies of this email. Receipt of this e-mail shall not be deemed a waiver by Nucor of any privilege or the confidential nature of the information.
@BartNSTCL commented on GitHub (Aug 25, 2025):
As for the Special characters, I see Tilde, Hyphen, and Period.
Running the command
ls -alh /var/www/bookstack/bootstrap/cache
Result:
total 444K
drwxrwxr-x 2 www-data www-data 4.0K May 20 2024 .
drwxr-xr-x 3 processadmin www-data 4.0K Aug 17 2023 ..
-rwxrwxr-x 1 www-data www-data 14 Aug 17 2023 .gitignore
-rw-rw-r-- 1 processadmin processadmin 29K May 20 2024 config.php
-rwxrwxr-x 1 processadmin processadmin 802 May 20 2024 packages.php
-rw-rw-r-- 1 processadmin processadmin 372K May 20 2024 routes-v7.php
-rwxrwxr-x 1 processadmin processadmin 21K May 20 2024 services.php
@ssddanbrown commented on GitHub (Aug 26, 2025):
Hi @BartNSTCL,
It looks like at some point, a config caching (or optimization) command has been ran, which caches the config meaning
.envchanges won't take effect until the config cache is removed or rebuilt.I'd advise just manually deleting all
.phpfiles in the/var/www/bookstack/bootstrap/cachefolder to ensure removal of these.@BartNSTCL commented on GitHub (Aug 26, 2025):
After removing, I got the 500 error. Decided to Update to the latest version. I still got the error but I found I had the Access denied for user 'forge'@'localhost' in the Laravel log which I notes to run php artisan config:cache
After that, I was able to log in.
Thanks for the help!