Authentication Problem with Outline and Authelia After Changing
Password
reddit / selfhosted

----------------------------------------------------------------------
Bruno__AFK · 2023-11-05 06:10

I've been using Outline for my notes, and I've set up Authelia for
authentication. Everything was working smoothly until I recently
changed my Authelia password. Now, whenever I try to log in to
Outline, I'm getting an error message in the console that says:
"Failed to load resource: the server responded with a status of 401
()".

I've checked Authelia, and it seems to be giving the green light, and
from its side, the login is approved. However, I can't access my notes
on Outline. How can i get my notes back?

----------------------------------------------------------------------
arcadianarcadian · 2023-11-06 10:59

\- how did you change the password?

\- did you put your encrypted password into users\_database.yml ?

\- did you restart the authelia instance ?

----------------------------------------------------------------------
Bruno__AFK · 2023-11-07 18:28

\- i reset my password using email

\- no, noone was mentioning that i need to do that. Authelia logs
showing that login is approved, so password is OK

\- yes

----------------------------------------------------------------------
arcadianarcadian · 2023-11-07 20:22

OK, if you did reset using email, the second option is not necessary.

can you share access/error logs from your web/reverse proxy server?

----------------------------------------------------------------------
Bruno__AFK · 2023-11-08 09:14

Authelia log:


authelia  | time="2023-11-08T01:29:28+01:00" level=info
msg="Initializing server for non-TLS connections on '[::]:9071' path
'/'"
authelia  | time="2023-11-08T09:53:01+01:00" level=debug
msg="Authorization Request with id
'3251a8e2-da9d-4fb1-a5b7-392405e03fbe' on client with id
'outline24250bdee895abc2b5caf4bff3691539' is being processed"
method=GET path=/api/oidc/authorize remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:11+01:00" level=debug msg="Mark 1FA
authentication attempt made by user 'bruno_afk'" method=POST
path=/api/firstfactor remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:12+01:00" level=debug
msg="Successful 1FA authentication attempt made by user 'bruno_afk'"
method=POST path=/api/firstfactor remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:12+01:00" level=debug
msg="Authorization Request with id
'cf1bb3b7-d3e9-4f01-8bb3-a099e031ab92' on client with id
'outline24250bdee895abc2b5caf4bff3691539' is being processed"
method=GET path=/api/oidc/authorization remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:12+01:00" level=debug
msg="Authorization Request with id
'cf1bb3b7-d3e9-4f01-8bb3-a099e031ab92' on client with id
'outline24250bdee895abc2b5caf4bff3691539' using consent mode
'explicit' proceeding to generate a new consent session" method=GET
path=/api/oidc/authorization remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:12+01:00" level=debug
msg="Authorization Request with id
'cf1bb3b7-d3e9-4f01-8bb3-a099e031ab92' on client with id
'outline24250bdee895abc2b5caf4bff3691539' using consent mode
'explicit' authentication level 'one_factor' is sufficient for client
level 'one_factor'" method=GET path=/api/oidc/authorization
remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:12+01:00" level=debug
msg="Authorization Request with id
'cf1bb3b7-d3e9-4f01-8bb3-a099e031ab92' on client with id
'outline24250bdee895abc2b5caf4bff3691539' using consent mode
'explicit' is being redirected to 'https://auth.domain.com/consent?id=
0529a451-c01a-498b-b454-f43ed5b330f0'" method=GET
path=/api/oidc/authorization remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:14+01:00" level=debug
msg="Authorization Request with id
'7e22eb2f-41cc-4ffd-850e-e7b2269676d2' on client with id
'outline24250bdee895abc2b5caf4bff3691539' is being processed"
method=GET path=/api/oidc/authorization remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:14+01:00" level=debug
msg="Authorization Request with id
'7e22eb2f-41cc-4ffd-850e-e7b2269676d2' on client with id
'outline24250bdee895abc2b5caf4bff3691539' was successfully processed,
proceeding to build Authorization Response" method=GET
path=/api/oidc/authorization remote_ip=10.1.1.145
authelia  | time="2023-11-08T09:53:15+01:00" level=debug msg="Access
Request with id '7e22eb2f-41cc-4ffd-850e-e7b2269676d2' on client with
id 'outline24250bdee895abc2b5caf4bff3691539' is being processed"
method=POST path=/api/oidc/token remote_ip=10.0.60.96
authelia  | time="2023-11-08T09:53:16+01:00" level=debug msg="Access
Request with id '7e22eb2f-41cc-4ffd-850e-e7b2269676d2' on client with
id 'outline24250bdee895abc2b5caf4bff3691539' has successfully been
processed" method=POST path=/api/oidc/token remote_ip=10.0.60.96


Outline log:


{"error":"User authentication def94844-cc08-417a-936a-3ae21b837f48
already exists for f79c606c-6de9-48fb-9c55-2d8e2a874c5e, tried to
assign to
c12b68e9-64c7-4f22-85e4-733fcc0912b3","level":"error","message":"Error
during authentication","stack":"UnauthorizedError: User authentication
def94844-cc08-417a-936a-3ae21b837f48 already exists for
f79c606c-6de9-48fb-9c55-2d8e2a874c5e, tried to assign to
c12b68e9-64c7-4f22-85e4-733fcc0912b3\n    at AuthenticationError
(/opt/outline/build/server/errors.js:40:34)\n    at accountProvisioner
(/opt/outline/build/server/commands/accountProvisioner.js:121:43)\n
at process.processTicksAndRejections
(node:internal/process/task_queues:95:5)"}