[Support]: CSRF Token Expiration Issue with Keycloak and OAuth2 Proxy about oauth2-proxy HOT 5 OPEN

@eminaktas

from oauth2-proxy.

I believe I have something similar:, see #2485

from oauth2-proxy.

we have the same issue here.
Happens also if the user resets credential in this flow: Clicks on 'reset password' -> user gives username -> user receives mail -> clicks on 'reset password'-link on the mail -> if he waits longer than 5mins (not 100 sure but maybe longer) and then submits the form keycloak response with 403 csrf invalid token.

from oauth2-proxy.

@cuberinooo default CRSF token expire time is 15m for --cookie-csrf-expire https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview#config-file Maybe you could try extends it

from oauth2-proxy.

already tried this. Even without declaring a time the default is 15min as you wrote it and I should be able to confirm the form within 15min without any csrf timeout.

from oauth2-proxy.