Google SSO Issue {"code":"E_NOT_FOUND"} #810

Closed
opened 2026-02-04 21:23:41 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @ilovefreesw on GitHub (Sep 9, 2025).

Hi, I am getting this after configuring Google SSO

Image

My OIDC ENVs:

OIDC_ISSUER=https://accounts.google.com
OIDC_CLIENT_ID=188528823XXXXXXXXXXXXapps.googleusercontent.com
OIDC_CLIENT_SECRET=GOXXXXXXXXO5Yw
OIDC_USE_OAUTH_CALLBACK=true
OIDC_SCOPES=openid email profile
OIDC_RESPONSE_MODE=form_post
OIDC_USERINFO_SIGNED_RESPONSE_ALG=RS256
OIDC_ADMIN_ROLES=admin
OIDC_PROJECT_OWNER_ROLES=project_owner
OIDC_BOARD_USER_ROLES=board_user
OIDC_EMAIL_ATTRIBUTE=email
OIDC_NAME_ATTRIBUTE=name
OIDC_USERNAME_ATTRIBUTE=preferred_username
OIDC_CLAIMS_SOURCE=userinfo

I don't know what I am doing wrong. There are no errors in the browser or in the docker logs.

Originally created by @ilovefreesw on GitHub (Sep 9, 2025). Hi, I am getting this after configuring Google SSO <img width="522" height="340" alt="Image" src="https://github.com/user-attachments/assets/00c6b167-03d0-4914-a7fe-582bfaa342f5" /> My OIDC ENVs: ``` OIDC_ISSUER=https://accounts.google.com OIDC_CLIENT_ID=188528823XXXXXXXXXXXXapps.googleusercontent.com OIDC_CLIENT_SECRET=GOXXXXXXXXO5Yw OIDC_USE_OAUTH_CALLBACK=true OIDC_SCOPES=openid email profile OIDC_RESPONSE_MODE=form_post OIDC_USERINFO_SIGNED_RESPONSE_ALG=RS256 OIDC_ADMIN_ROLES=admin OIDC_PROJECT_OWNER_ROLES=project_owner OIDC_BOARD_USER_ROLES=board_user OIDC_EMAIL_ATTRIBUTE=email OIDC_NAME_ATTRIBUTE=name OIDC_USERNAME_ATTRIBUTE=preferred_username OIDC_CLAIMS_SOURCE=userinfo ``` I don't know what I am doing wrong. There are no errors in the browser or in the docker logs.
Author
Owner

@meltyshev commented on GitHub (Sep 9, 2025):

Hey! Hmmm... Are you using the manual or Docker-based installation? This looks a bit strange, because the server should serve index.html from the views, which handles the callback on the frontend. Instead, it seems there's no route like that, or maybe the index.html is missing. Could you please share your configuration (without any sensitive data) and the steps you used for installation?

@meltyshev commented on GitHub (Sep 9, 2025): Hey! Hmmm... Are you using the manual or Docker-based installation? This looks a bit strange, because the server should serve `index.html` from the views, which handles the callback on the frontend. Instead, it seems there's no route like that, or maybe the `index.html` is missing. Could you please share your configuration (without any sensitive data) and the steps you used for installation?
Author
Owner

@ilovefreesw commented on GitHub (Sep 9, 2025):

I tinkered the given compose.yml file a bit...

services:
  traefik:
    image: traefik:v2.10
    restart: unless-stopped
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
      - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
      - "--certificatesresolvers.letsencrypt.acme.email=sul@xxxxx.com"
      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "/srv/planka-data/cert-data:/letsencrypt"

  planka:
    image: ghcr.io/plankanban/planka:2.0.0-rc.4
    restart: unless-stopped
    environment:
      - BASE_URL=${BASE_URL}
      - DATABASE_URL=${DATABASE_URL}
      - SECRET_KEY=${SECRET_KEY}
      - SMTP_HOST=${SMTP_HOST}
      - SMTP_PORT=${SMTP_PORT}
      - SMTP_SECURE=${SMTP_SECURE}
      - SMTP_USER=${SMTP_USER}
      - SMTP_PASSWORD=${SMTP_PASSWORD}
      - SMTP_FROM=${SMTP_FROM}
      - LOG_LEVEL=warn
      - TRUST_PROXY=true
      - OIDC_ISSUER=${OIDC_ISSUER}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET}
      - OIDC_USE_OAUTH_CALLBACK=${OIDC_USE_OAUTH_CALLBACK}
      - OIDC_SCOPES=${OIDC_SCOPES}
      - OIDC_CLAIMS_SOURCE=userinfo
      - OIDC_ADMIN_ROLES=admin
      - OIDC_PROJECT_OWNER_ROLES=project_owner
      - OIDC_BOARD_USER_ROLES=board_user
      - OIDC_EMAIL_ATTRIBUTE=email
      - OIDC_NAME_ATTRIBUTE=name
      - OIDC_IGNORE_ROLES=true
    volumes:
      - /srv/planka-data/favicons:/app/public/favicons
      - /srv/planka-data/user-avatars:/app/public/user-avatars
      - /srv/planka-data/background-images:/app/public/background-images
      - /srv/planka-data/attachments:/app/private/attachments
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.planka.rule=Host(`boxxxxxxx.com`)"
      - "traefik.http.routers.planka.entrypoints=websecure"
      - "traefik.http.routers.planka.tls.certresolver=letsencrypt"
    depends_on:
      postgres:
        condition: service_healthy

  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      - POSTGRES_DB=planka
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
    ports:
      - "5432:5432"
    volumes:
      - /srv/planka-data/db-data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d planka"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  cert-data:
  favicons:
  user-avatars:
  background-images:
  attachments:
  db-data:

Removing OIDC_USERNAME_ATTRIBUTE=preferred_username (as per chatgpt) worked for me. After that, I ran into this issue so manually changed role to admin in the database... everything is working fine now.

@ilovefreesw commented on GitHub (Sep 9, 2025): I tinkered the given compose.yml file a bit... ``` services: traefik: image: traefik:v2.10 restart: unless-stopped command: - "--api.insecure=true" - "--providers.docker=true" - "--entrypoints.web.address=:80" - "--entrypoints.websecure.address=:443" - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true" - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web" - "--certificatesresolvers.letsencrypt.acme.email=sul@xxxxx.com" - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json" ports: - "80:80" - "443:443" volumes: - "/var/run/docker.sock:/var/run/docker.sock:ro" - "/srv/planka-data/cert-data:/letsencrypt" planka: image: ghcr.io/plankanban/planka:2.0.0-rc.4 restart: unless-stopped environment: - BASE_URL=${BASE_URL} - DATABASE_URL=${DATABASE_URL} - SECRET_KEY=${SECRET_KEY} - SMTP_HOST=${SMTP_HOST} - SMTP_PORT=${SMTP_PORT} - SMTP_SECURE=${SMTP_SECURE} - SMTP_USER=${SMTP_USER} - SMTP_PASSWORD=${SMTP_PASSWORD} - SMTP_FROM=${SMTP_FROM} - LOG_LEVEL=warn - TRUST_PROXY=true - OIDC_ISSUER=${OIDC_ISSUER} - OIDC_CLIENT_ID=${OIDC_CLIENT_ID} - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET} - OIDC_USE_OAUTH_CALLBACK=${OIDC_USE_OAUTH_CALLBACK} - OIDC_SCOPES=${OIDC_SCOPES} - OIDC_CLAIMS_SOURCE=userinfo - OIDC_ADMIN_ROLES=admin - OIDC_PROJECT_OWNER_ROLES=project_owner - OIDC_BOARD_USER_ROLES=board_user - OIDC_EMAIL_ATTRIBUTE=email - OIDC_NAME_ATTRIBUTE=name - OIDC_IGNORE_ROLES=true volumes: - /srv/planka-data/favicons:/app/public/favicons - /srv/planka-data/user-avatars:/app/public/user-avatars - /srv/planka-data/background-images:/app/public/background-images - /srv/planka-data/attachments:/app/private/attachments labels: - "traefik.enable=true" - "traefik.http.routers.planka.rule=Host(`boxxxxxxx.com`)" - "traefik.http.routers.planka.entrypoints=websecure" - "traefik.http.routers.planka.tls.certresolver=letsencrypt" depends_on: postgres: condition: service_healthy postgres: image: postgres:16-alpine restart: unless-stopped environment: - POSTGRES_DB=planka - POSTGRES_USER=postgres - POSTGRES_PASSWORD=${POSTGRES_PASSWORD} ports: - "5432:5432" volumes: - /srv/planka-data/db-data:/var/lib/postgresql/data healthcheck: test: ["CMD-SHELL", "pg_isready -U postgres -d planka"] interval: 10s timeout: 5s retries: 5 volumes: cert-data: favicons: user-avatars: background-images: attachments: db-data: ``` Removing `OIDC_USERNAME_ATTRIBUTE=preferred_username` (as per chatgpt) worked for me. After that, I ran into [this issue](https://github.com/plankanban/planka/issues/661) so manually changed role to admin in the database... everything is working fine now.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/planka#810