[Hue 4.11.0] Silent function to re-authenticate don't seems be working with Keycloak oidc provider

[gmndr]

Hello,

I am using Hue 4.11.0 release and I am getting the error below, which disrupt users. I reproduced the problem on a test cluster.

After some research, I found the error message here
$.jHueNotify.error( I18n( 'It looks like you are offline or an unknown error happened. Please refresh the page.' ) );
and this was related to this variable. When I try to change the time setting, it directly impacts the problem.

However, I found this function which should allow a silent reauthentification if I believe the message :
# The id_token has expired, so we have to re-authenticate silently.

But that isn't the case and I don't see how to solve the problem without modifying the settings.py file.

Do you have any ideas ?

Thanks

[gmndr]

Hello everyone,

I'm still having a problem. I've tried different configurations and tried to find a solution, but I'm still stuck.

However, I found more details about the silent reauthentication request failure, including changing this setting and leaving it blank:
grep ^secure_content_security_policy desktop/conf/hue.ini
secure_content_security_policy=""

I now see different requests executed by the silent function and by the browser debugger:

The "options" request in error after the redirect:

Then, the request fails:

More details with the debugger:

However, I don't understand the error generated by the "options" request after querying Keycloak and being redirected. I've tried different CORS configurations, but the "CORS Preflight Did Not Succeed" error persists, and I don't know why.

Can anyone help?