OIDC authentication not working in HUE 4.9

Hi @Romain,

There is no public doc on how to setup OIDC auth in HUE.

I configured OIDC authentication in 4.9 hue but it doesn’t seem to work. Below is the error I observe in hue logs.

[08/Sep/2022 01:39:28 -0700] access ERROR 10.214.102.219 sahil.matt@swist.com - “POST /desktop/log_js_error HTTP/1.1” — JS ERROR: {“msg”:"Uncaught TypeError: Unable to process binding "sortable:function(){return {\n template:‘snippeteditor’,data:snippets,isEnabled:true,options:{‘handle’:’.move-widget’,‘axis’:‘y’,‘opacity’:0.8,‘placeholder’:‘snippet-move-placeholder’,‘greedy’:true,‘stop’:function(event,ui){\n var $element = $(event.target )
[08/Sep/2022 01:39:28 -0700] access ERROR 10.214.102.219 sahil.matt@swist.com - “POST /desktop/log_js_error HTTP/1.1” — JS ERROR: {“msg”:"Uncaught TypeError: Unable to process binding "sortable:function(){return {\n template:‘snippeteditor’,data:snippets,isEnabled:true,options:{‘handle’:’.move-widget’,‘axis’:‘y’,‘opacity’:0.8,‘placeholder’:‘snippet-move-placeholder’,‘greedy’:true,‘stop’:function(event,ui){\n var $element = $(event.target )

Below is the config I did in hue.ini. Am I missing anything? Please advice

=============
[[auth]]
backend = desktop.auth.backend.OIDCBackend

[[oidc]]

oidc_rp_client_id=xxxxxxxx-klm1mtqqdtqoi3l1fovuj35tmpaor6u9.apps.googleusercontent.com

oidc_rp_client_secret=xxxxx-QK0LJpZjMGbsTm2AhSA9kpOoPl-y

oidc_op_authorization_endpoint=https://accounts.google.com/o/oauth2/v2/auth

oidc_op_token_endpoint=https://oauth2.googleapis.com/token

oidc_op_user_endpoint=https://openidconnect.googleapis.com/v1/userinfo

##’ oidc_rp_idp_sign_key=/path/to/key_file

oidc_op_jwks_endpoint=https://www.googleapis.com/oauth2/v3/certs

oidc_verify_ssl=false

##’ login_redirect_url=https://localhost:8888/oidc/callback/

##’ logout_redirect_url=https://keycloak.example.com/auth/realms/cloudera/protocol/openid-connect/logout

##’ login_redirect_url_failure=https://localhost:8888/hue/oidc_failed/

create_users_on_login=true

oidc_username_attribute=email