# Github OAUTH2 authentication error, no error message **URL:** \ **Category:** Drone Support\ **Created:** [February 14, 2019, 10:39pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029 "2019-02-14T22:39:17Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![patrycju](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@patrycju](https://drone.discourse.group/u/patrycju)\ **Post date:** [February 14, 2019, 10:39pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/1 "2019-02-14T22:39:17Z")
Hello, I’m having trouble with single-machine drone setup. After I set up everything, I go to ‘http://\’, get redirected to Github, where I authorize drone application and then I end up in ‘http://\/login/error?message=’ URL, with “Login Failed.” on the screen. My configuration: docker-compose.yml ```auto version: '2' services: drone: image: drone/drone:1.0.0-rc.5 ports: - "8881:80" networks: - drone volumes: - ./drone-data:/var/lib/drone/ - /var/run/docker.sock:/var/run/docker.sock environment: DRONE_GITHUB_SERVER: https://github.com/ DRONE_GITHUB_CLIENT_ID: DRONE_GITHUB_CLIENT_SECRET: DRONE_RUNNER_CAPACITY: 2 DRONE_SERVER_HOST: DRONE_SERVER_PROTO: http DRONE_LOGS_DEBUG: "true" DRONE_GIT_ALWAYS_AUTH: "false" networks: drone: driver: bridge ``` Drone OAUTH2 Github application points to http://\ and http://\/login. I have also tried to delete and create application again. Docker-compose logs (there is no valuable information, except maybe "cannot find remote user: ", which I have no idea what is it, since I cannot find that message in repository): ```auto Creating network "drone_drone" with driver "bridge" Creating drone_drone_1 ... done Attaching to drone_drone_1 drone_1 | {"kind":"trial","level":"debug","msg":"main: license loaded","time":"2019-02-14T22:18:13Z"} drone_1 | {"level":"info","msg":"main: starting the local build runner","threads":2,"time":"2019-02-14T22:18:13Z"} drone_1 | {"interval":1800000000000,"level":"info","msg":"main: cron schedule enabled","time":"2019-02-14T22:18:13Z"} drone_1 | {"acme":false,"host":"178.43.102.36","level":"info","msg":"main: starting the http server","port":":80","proto":"http","time":"2019-02-14T22:18:13Z","url":"http://178.43.102.36"} drone_1 | {"arch":"amd64","level":"debug","machine":"2eb833d3ae78","msg":"runner: polling queue","os":"linux","time":"2019-02-14T22:18:13Z"} drone_1 | {"arch":"amd64","kernel":"","level":"debug","msg":"manager: request queue item","os":"linux","time":"2019-02-14T22:18:13Z","variant":""} drone_1 | {"arch":"amd64","level":"debug","machine":"2eb833d3ae78","msg":"runner: polling queue","os":"linux","time":"2019-02-14T22:18:13Z"} drone_1 | {"arch":"amd64","kernel":"","level":"debug","msg":"manager: request queue item","os":"linux","time":"2019-02-14T22:18:13Z","variant":""} drone_1 | {"fields.time":"2019-02-14T22:18:23Z","latency":12190,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46610","request":"/","request-id":"1HBk6Sq7Tq8XclrJRSgkKEz32lW","time":"2019-02-14T22:18:23Z"} drone_1 | {"fields.time":"2019-02-14T22:18:23Z","latency":257681,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46610","request":"/css/app.39ba2f4d.css","request-id":"1HBk6VomSbJ9DMBQrLd1U1OJqJ8","time":"2019-02-14T22:18:23Z"} drone_1 | {"fields.time":"2019-02-14T22:18:23Z","latency":1021432,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46612","request":"/js/app.48b68369.js","request-id":"1HBk6UGSl3VjzWfMxMgWY4EGu1A","time":"2019-02-14T22:18:23Z"} drone_1 | {"fields.time":"2019-02-14T22:18:23Z","latency":2644980,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46614","request":"/js/chunk-vendors.acff1940.js","request-id":"1HBk6XTxAUJZgW1JH5gpI1jOdGV","time":"2019-02-14T22:18:23Z"} drone_1 | {"level":"debug","msg":"api: authentication required","request-id":"1HBk6Tlh4dR74MWh9tiUaJd2jDj","time":"2019-02-14T22:18:23Z"} drone_1 | {"level":"debug","msg":"api: guest access","request-id":"1HBk6Tlh4dR74MWh9tiUaJd2jDj","time":"2019-02-14T22:18:23Z"} drone_1 | {"fields.time":"2019-02-14T22:18:23Z","latency":132086,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46614","request":"/api/user","request-id":"1HBk6Tlh4dR74MWh9tiUaJd2jDj","time":"2019-02-14T22:18:23Z"} drone_1 | {"level":"debug","msg":"events: stream opened","request-id":"1HBk6Z0gFbT06F2uxrZP5lHW0zZ","time":"2019-02-14T22:18:24Z"} drone_1 | {"fields.time":"2019-02-14T22:18:24Z","latency":64343,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46612","request":"/favicon.png","request-id":"1HBk6bryukex3U3l2MEhnlCDZag","time":"2019-02-14T22:18:24Z"} drone_1 | {"fields.time":"2019-02-14T22:18:24Z","latency":66783,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46612","request":"/login","request-id":"1HBk6g0Tg5xdUAwz9ZOp6BCB3oz","time":"2019-02-14T22:18:24Z"} drone_1 | {"level":"debug","msg":"events: stream cancelled","request-id":"1HBk6Z0gFbT06F2uxrZP5lHW0zZ","time":"2019-02-14T22:18:24Z"} drone_1 | {"level":"debug","msg":"events: stream closed","request-id":"1HBk6Z0gFbT06F2uxrZP5lHW0zZ","time":"2019-02-14T22:18:24Z"} drone_1 | {"level":"debug","msg":"api: guest access","request-id":"1HBk6Z0gFbT06F2uxrZP5lHW0zZ","time":"2019-02-14T22:18:24Z"} drone_1 | {"fields.time":"2019-02-14T22:18:24Z","latency":497173822,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46614","request":"/api/stream","request-id":"1HBk6Z0gFbT06F2uxrZP5lHW0zZ","time":"2019-02-14T22:18:24Z"} drone_1 | {"level":"debug","msg":"cannot find remote user: ","time":"2019-02-14T22:18:32Z"} drone_1 | {"fields.time":"2019-02-14T22:18:32Z","latency":5607075366,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46612","request":"/login?code=5154c649ddc19a1f64ff\u0026state=4d65822107fcfd52","request-id":"1HBk6y23t3iXA3Q0sRTt9zZxhps","time":"2019-02-14T22:18:32Z"} drone_1 | {"fields.time":"2019-02-14T22:18:32Z","latency":16551,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46612","request":"/login/error?message=","request-id":"1HBk7fV4wQxQLf4ifmNqYvz0r6K","time":"2019-02-14T22:18:32Z"} drone_1 | {"level":"debug","msg":"api: authentication required","request-id":"1HBk7ZpSfXKxexF7xKP4swFoo29","time":"2019-02-14T22:18:32Z"} drone_1 | {"level":"debug","msg":"api: guest access","request-id":"1HBk7ZpSfXKxexF7xKP4swFoo29","time":"2019-02-14T22:18:32Z"} drone_1 | {"fields.time":"2019-02-14T22:18:32Z","latency":73903,"level":"debug","method":"GET","msg":"","remote":"178.43.102.36:46612","request":"/api/user","request-id":"1HBk7ZpSfXKxexF7xKP4swFoo29","time":"2019-02-14T22:18:32Z"} drone_1 | {"level":"debug","msg":"events: stream opened","request-id":"1HBk7nAhUTDazsSNWcyzcwYhUFO","time":"2019-02-14T22:18:33Z"} ``` I’ve spent 2 days on this issue, tried different configuration but still no luck. Any help will be appreciated. Thanks. ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [February 14, 2019, 11:01pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/2 "2019-02-14T23:01:49Z")
I would need to see the value of `` and I would need to know the full callback url that you have entered into GitHub. ---
**Author:** ![patrycju](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@patrycju](https://drone.discourse.group/u/patrycju)\ **Post date:** [February 14, 2019, 11:15pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/3 "2019-02-14T23:15:29Z")
my\_drone\_address is 178.43.102.36:8881 full callback url is [http://178.43.102.36:8881/login](http://178.43.102.36:8881/login) DRONE\_SERVER\_HOST is 178.43.102.36 (made mistake when I obfuscated the IP) The issue seems partially solved because it works just fine when I run Drone with docker command: ```auto docker run \ --volume=/var/run/docker.sock:/var/run/docker.sock \ --volume=/var/lib/drone:/data \ --env=DRONE_GITHUB_SERVER=https://github.com \ --env=DRONE_GITHUB_CLIENT_ID= \ --env=DRONE_GITHUB_CLIENT_SECRET= \ --env=DRONE_RUNNER_CAPACITY=2 \ --env=DRONE_SERVER_HOST=178.43.102.36 \ --env=DRONE_SERVER_PROTO=http \ --publish=8881:80 \ --name=drone \ drone/drone:1.0.0-rc.5 ``` However, it does not work with docker-compose, when same configuration is applied. ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [February 14, 2019, 11:48pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/4 "2019-02-14T23:48:44Z")
one thing that jumps out is that you should include the port in DRONE\_SERVER\_HOST: ```diff -DRONE_SERVER_HOST=178.43.102.36 +DRONE_SERVER_HOST=178.43.102.36:8881 ``` I’m not sure if this impacts authorization. Also keep an eye on the browser redirect url coming from github, which might include some addition error details. ---
**Author:** ![mamanagha](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@mamanagha](https://drone.discourse.group/u/mamanagha)\ **Post date:** [February 27, 2019, 10:21pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/5 "2019-02-27T22:21:18Z")
Hi. is there any update on this? I have same problem and considered adding `port` too. but didn’t help. could it be a http issue being considered insecure? @bradrydzewski ---
**Author:** ![mamanagha](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@mamanagha](https://drone.discourse.group/u/mamanagha)\ **Post date:** [February 27, 2019, 10:34pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/6 "2019-02-27T22:34:58Z")
From the logs I have ```auto { "acme": true, "host": "[my-server]:80", "level": "info", "msg": "main: starting the http server", "port": ":443", "proto": "https", "time": "2019-02-27T22:32:57Z", "url": "https://[my-server]:80" } ``` even though I pass ```auto - name: DRONE_SERVER_PROTO value: http ``` so looks like it doesn’t care about that `DRONE_SERVER_PROTO` @bradrydzewski ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [February 27, 2019, 11:04pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/7 "2019-02-27T23:04:56Z")
> so looks like it doesn’t care about that `DRONE_SERVER_PROTO` It would appear you have `DRONE_TLS_AUTOCERT=true` enabled in which case this is the expected behavior. When you enable this variable you are enabling Lets Encrypt which enforces https, and therefore ignores `DRONE_SERVER_PROTO` ---
**Author:** ![mamanagha](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@mamanagha](https://drone.discourse.group/u/mamanagha)\ **Post date:** [February 27, 2019, 11:10pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/8 "2019-02-27T23:10:08Z")
thanks @bradrydzewski I removed `DRONE_TLS_AUTOCERT=true` but still have login issue. I see github is called and then github redirects to drone with something like this: ```auto http://[my-sevice]/login?code=[code]&state=[state] ``` but after that I am being redirected to ```auto http://[my-server]/login/error?message=: ``` ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [February 27, 2019, 11:16pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/9 "2019-02-27T23:16:44Z")
are you a former colleague of davidbyttow? I believe we worked through this same issue and found that it had something to do with a security proxy that was in place. this was a snippet from our conversation: > Go-login worked, I was able to get the access token when I added the authorization header to bypass our security proxy. I believe he had to manually patch the source code, but I’m not sure. ---
**Author:** ![mamanagha](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@mamanagha](https://drone.discourse.group/u/mamanagha)\ **Post date:** [February 27, 2019, 11:27pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/10 "2019-02-27T23:27:49Z")
yes. 🙂 thans; will check further. ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [March 6, 2019, 8:50pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/11 "2019-03-06T20:50:43Z")
@mamanagha did you ever get it figured out? David and I had pretty extensive communications in private messages, so I can try to look back through the chat history to understand the changes he might have made. ---
**Author:** ![mamanagha](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@mamanagha](https://drone.discourse.group/u/mamanagha)\ **Post date:** [March 6, 2019, 9:02pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/12 "2019-03-06T21:02:59Z")
> [@On another topic](https://drone.discourse.group/t/3801/11): > > I can t yes we had internal documentation and the images that needed to be used. on a separate note how do you compare drone with kNative-build? thanks @bradrydzewski ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [March 6, 2019, 9:20pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/13 "2019-03-06T21:20:04Z")
my limited understanding of knative build is that it is a low-level primitive used to build and publish images. You could integrate knative-build into an existing CI system. Or you could build a new CI system on top of knative-build. You would need to create the user interface, webhook handlers, cloning logic, permissions, etc. From their docs: > [1] Knative build does not provide a complete standalone CI/CD solution, it does however, provide a lower-level building block that was purposefully designed to enable integration and utilization in larger systems. Drone does not use knative-build directly because we already have our own pipeline runner. In addition we need to support more general purpose use cases such as packages and libraries (ex. build and publish to npm), android apps, ios apps, etc. ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [March 6, 2019, 9:29pm UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/14 "2019-03-06T21:29:42Z")
@ [mamanagha](http://discuss.harness.io/u/mamanagha) it would be great to sync at some point to understand the changes David made so we can merge upstream. You are probably already stuck with an outdated release candidate with no path to take advantage of fixes and features ☹ … I would be happy to help! ---
**Author:** ![Morriz](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/morriz/32/3553_2.png) [@Morriz](https://drone.discourse.group/u/Morriz)\ **Post date:** [April 3, 2019, 1:04am UTC](https://drone.discourse.group/t/github-oauth2-authentication-error-no-error-message/11029/15 "2019-04-03T01:04:57Z")
Hi, I have lost quite some hours over this, and have no clue how to solve this. I just created a separate issue for this here: [cannot-find-remote-user-bad-credentials](http://discuss.harness.io/t/cannot-find-remote-user-bad-credentials/4176) Maybe it is related?