Generic Auth and Auth0

Grafana Authentication
1

Hi, trying to use auth0.com in Generic oAuth, but getting error:

Server side error
login.OAuthLogin(get info from generic_oauth)

What does this error mean? My guess is that its having a problem getting userinfo at api_url but not 100% sure.

Using Grafana 4.3.3

#################################### Generic OAuth ##########################
[auth.generic_oauth]
enabled = true
name = OAuth
;allow_sign_up = true
client_id = 1111111
client_secret = 2222222
;scopes = auth0_domain/userinfo
auth_url = auth0_domain/authorize
token_url = auth0_domain/oauth/token
api_url = auth0_domain/userinfo
;team_ids =
;allowed_organizations =

Thanks in advance.

2

Did you resolve this? Or do you still need help?

3

Sadly we didn’t, any ideas appreciated. We’re thinking of forking/cloning Grafana so we can have greater integration with our product. Thanks in advance!

4

Hi,

as far as I know, auth0 behaves as ADFS (on-prem, AAD seems to behave differently) , ie provide most of the information in id_token directly instead of userinfo.
I just opened https://github.com/grafana/grafana/issues/9947 to deal with this.

Right now, my workaround is a simple python script which serve http, get the Authorization header, decode jwt token and extract the mail from it, then send it as reply. Then just point your grafana api_url to it.

5