{"action":"created","issue":{"url":"https://api.github.com/repos/concourse/concourse/issues/2471","repository_url":"https://api.github.com/repos/concourse/concourse","labels_url":"https://api.github.com/repos/concourse/concourse/issues/2471/labels{/name}","comments_url":"https://api.github.com/repos/concourse/concourse/issues/2471/comments","events_url":"https://api.github.com/repos/concourse/concourse/issues/2471/events","html_url":"https://github.com/concourse/concourse/issues/2471","id":348393283,"node_id":"MDU6SXNzdWUzNDgzOTMyODM=","number":2471,"title":"4.0.0 skyhook token expired immediately after generation","user":{"login":"eedwards-sk","id":34585329,"node_id":"MDQ6VXNlcjM0NTg1MzI5","avatar_url":"https://avatars1.githubusercontent.com/u/34585329?v=4","gravatar_id":"","url":"https://api.github.com/users/eedwards-sk","html_url":"https://github.com/eedwards-sk","followers_url":"https://api.github.com/users/eedwards-sk/followers","following_url":"https://api.github.com/users/eedwards-sk/following{/other_user}","gists_url":"https://api.github.com/users/eedwards-sk/gists{/gist_id}","starred_url":"https://api.github.com/users/eedwards-sk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eedwards-sk/subscriptions","organizations_url":"https://api.github.com/users/eedwards-sk/orgs","repos_url":"https://api.github.com/users/eedwards-sk/repos","events_url":"https://api.github.com/users/eedwards-sk/events{/privacy}","received_events_url":"https://api.github.com/users/eedwards-sk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-08-07T16:19:13Z","updated_at":"2018-08-26T19:38:03Z","closed_at":null,"author_association":"NONE","body":"# Bug Report\r\n\r\n* Concourse version: 4.0.0\r\n* Deployment type (BOSH/Docker/binary): Docker Compose (Web / Worker) Darwin (Worker)\r\n* Infrastructure/IaaS:\r\n* Browser (if applicable): Chrome\r\n* Did this used to work?: It does sometimes\r\n\r\nGetting a 'token expired' issue when trying to execute a fly command that logs me in through skyhook. Results in a 400 error on the sky token page and errors in logs.\r\n\r\nexecution flow:\r\n\r\n1) attempted to load a pipeline\r\n\r\n```\r\n→ snap-dev concourse fly set-pipeline -c ci/concourse/pipeline-local.yaml -p bash-util-local --load-vars-from=ci/concourse/vars/local.yaml\r\ncould not find a valid token.\r\nlogging in to team 'main'\r\n\r\nnavigate to the following URL in your browser:\r\n\r\n  http://concourse.service.local.consul:8080/sky/login?redirect_uri=http://127.0.0.1:57269/auth/callback\r\n```\r\n\r\n2) navigated to the url and logged in, which redirected me to a 400 page (chrome error page) with this url:\r\n\r\n```\r\nhttp://concourse.service.local.consul:8080/sky/callback?code=lnv25sms7u5qbmbihlphpp6lk&state=eyJyZWRpcmVjdF91cmkiOiJodHRwOi8vMTI3LjAuMC4xOjU3MjY5L2F1dGgvY2FsbGJhY2siLCJlbnRyb3B5IjoiYzdmNDY0ZWE5ODBhOTc0N2VhMzUyYmY0NTBkZmNmYjRmNWUxODhmOTRjMzE1ZTQ5YWFmOWMzYTRhNDY5MDA1YiJ9\r\n```\r\n\r\n3) checked web logs which contained numerous entries of:\r\n\r\n```\r\n{\"timestamp\":\"1533658475.805241585\",\"source\":\"atc\",\"message\":\"atc.sky.userinfo.failed-to-validate-claims\",\"log_level\":2,\"data\":{\"error\":\"square/go-jose/jwt: validation failed, token is expired (exp)\",\"session\":\"4.6249\"}}\r\n```\r\n\r\nEven though this was just generated now. Possibly a time desync issue? I'm running concourse in docker compose and was logging in from the local dev mac.\r\n"},"comment":{"url":"https://api.github.com/repos/concourse/concourse/issues/comments/416064548","html_url":"https://github.com/concourse/concourse/issues/2471#issuecomment-416064548","issue_url":"https://api.github.com/repos/concourse/concourse/issues/2471","id":416064548,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNjA2NDU0OA==","user":{"login":"eedwards-sk","id":34585329,"node_id":"MDQ6VXNlcjM0NTg1MzI5","avatar_url":"https://avatars1.githubusercontent.com/u/34585329?v=4","gravatar_id":"","url":"https://api.github.com/users/eedwards-sk","html_url":"https://github.com/eedwards-sk","followers_url":"https://api.github.com/users/eedwards-sk/followers","following_url":"https://api.github.com/users/eedwards-sk/following{/other_user}","gists_url":"https://api.github.com/users/eedwards-sk/gists{/gist_id}","starred_url":"https://api.github.com/users/eedwards-sk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eedwards-sk/subscriptions","organizations_url":"https://api.github.com/users/eedwards-sk/orgs","repos_url":"https://api.github.com/users/eedwards-sk/repos","events_url":"https://api.github.com/users/eedwards-sk/events{/privacy}","received_events_url":"https://api.github.com/users/eedwards-sk/received_events","type":"User","site_admin":false},"created_at":"2018-08-26T19:38:03Z","updated_at":"2018-08-26T19:38:03Z","author_association":"NONE","body":"Setting the hostname made it way worse.\r\n\r\n```\r\n{\"timestamp\":\"1535312181.877935648\",\"source\":\"atc\",\"message\":\"atc.sky.token.failed-to-fetch-dex-token\",\"log_level\":2,\"data\":{\"error\":\"Post http://concourse.service.localtest.consul:8181/sky/issuer/token: dial tcp 172.17.0.10:8181: connect: connection refused\",\"session\":\"4.7\"}}\r\n```\r\n\r\nNow I cannot log in at all, because the hostname is resolving incorrectly from inside the container.\r\n\r\n`concourse.service.localtest.consul` should be my host IP, which is `192.168.20.100` not `172.17.0.10`"}}
{"actor":{"display_login":"eedwards-sk"}}