Repository navigation
Labels
Description
Describe the bug
Seen from desktop client.
Server responds 502 (mostly) or 500 when desktop client tries to access https://localhost:9200/.well-known/webfinger?resource=acct:me@localhost with provided access token.
For example:
GET https://localhost:9200/.well-known/webfinger?resource=acct:me@localhost
-H 'Authorization: Bearer eyJhb.....'
502
2026/08/28 09:34:49 http: panic serving 127.0.0.1:56568: runtime error: invalid memory address or nil pointer dereference
goroutine 7940 [running]:
net/http.(*conn).serve.func1()
/home/sawjan/.gobrew/current/go/src/net/http/server.go:1943 +0xd3
panic({0x35975a0?, 0x75daa80?})
/home/sawjan/.gobrew/current/go/src/runtime/panic.go:783 +0x132
github.com/coreos/go-oidc/v3/oidc.(*Provider).UserInfo(0x54f8498?, {0x54f8498?, 0xc002bd74d0?}, {0x54cd960?, 0xc00148f1f0?})
/mnt/workspace/opencloud/opencloud/vendor/github.com/coreos/go-oidc/v3/oidc/oidc.go:455 +0x58
github.com/opencloud-eu/opencloud/pkg/middleware.OidcAuth.func2.1({0x54f2e00, 0xc003842380}, 0xc000474280)
/mnt/workspace/opencloud/opencloud/pkg/middleware/oidc.go:76 +0x3a3
net/http.HandlerFunc.ServeHTTP(0x54e86a8?, {0x54f2e00?, 0xc003842380?}, 0xc001cd0438?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/riandyrn/otelchi.traceware.ServeHTTP({{{0x54df350, 0xc001d21200}, {0x54e9ed0, 0xc001f86750}, {0x54f9348, 0xc0018b89c0}, 0x0, {0x0, 0x0, 0x0}, ...}, ...}, ...)
/mnt/workspace/opencloud/opencloud/vendor/github.com/riandyrn/otelchi/middleware.go:199 +0x129c
github.com/opencloud-eu/opencloud/services/webfinger/pkg/server/http.Server.Version.func16.1({0x54e86a8, 0xc0055400f0}, 0xc000d41a40)
/mnt/workspace/opencloud/opencloud/pkg/middleware/version.go:18 +0xfc
net/http.HandlerFunc.ServeHTTP(0xc00193b040?, {0x54e86a8?, 0xc0055400f0?}, 0xc000d41a40?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/rs/cors.(*Cors).Handler-fm.(*Cors).Handler.func1({0x54e86a8, 0xc0055400f0}, 0xc000d41a40)
/mnt/workspace/opencloud/opencloud/vendor/github.com/rs/cors/cors.go:289 +0x164
net/http.HandlerFunc.ServeHTTP(0x3959a20?, {0x54e86a8?, 0xc0055400f0?}, 0xd?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/opencloud-eu/opencloud/pkg/middleware.NoCache.func1({0x54e86a8, 0xc0055400f0}, 0xc000d41a40)
/mnt/workspace/opencloud/opencloud/pkg/middleware/header.go:20 +0x309
net/http.HandlerFunc.ServeHTTP(0x780a7bd7c210?, {0x54e86a8?, 0xc0055400f0?}, 0x54ea770?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/opencloud-eu/opencloud/pkg/middleware.TraceContext.func1({0x54e86a8, 0xc0055400f0}, 0xc000d41900)
/mnt/workspace/opencloud/opencloud/pkg/middleware/tracing.go:19 +0x168
net/http.HandlerFunc.ServeHTTP(0x54f8498?, {0x54e86a8?, 0xc0055400f0?}, 0x54b26a8?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/go-chi/chi/v5/middleware.RequestID.func1({0x54e86a8, 0xc0055400f0}, 0xc000d417c0)
/mnt/workspace/opencloud/opencloud/vendor/github.com/go-chi/chi/v5/middleware/request_id.go:76 +0x20e
net/http.HandlerFunc.ServeHTTP(0xc000d417c0?, {0x54e86a8?, 0xc0055400f0?}, 0x3c091e0?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/go-chi/chi/v5/middleware.RealIP.func1({0x54e86a8, 0xc0055400f0}, 0xc000d417c0)
/mnt/workspace/opencloud/opencloud/vendor/github.com/go-chi/chi/v5/middleware/realip.go:33 +0x95
net/http.HandlerFunc.ServeHTTP(0x54f84d0?, {0x54e86a8?, 0xc0055400f0?}, 0x75dfc00?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/go-chi/chi/v5.(*Mux).ServeHTTP(0xc0018b89c0, {0x54e86a8, 0xc0055400f0}, 0xc000d41540)
/mnt/workspace/opencloud/opencloud/vendor/github.com/go-chi/chi/v5/mux.go:90 +0x2ee
net/http.serverHandler.ServeHTTP({0xc0032ad040?}, {0x54e86a8?, 0xc0055400f0?}, 0x6?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:3340 +0x8e
net/http.(*conn).serve(0xc0024b8240, {0x54f8498, 0xc001caa540})
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2109 +0x665
created by net/http.(*Server).Serve in goroutine 476
/home/sawjan/.gobrew/current/go/src/net/http/server.go:3493 +0x485
2026/08/28 09:34:49 http: panic serving 127.0.0.1:40616: runtime error: invalid memory address or nil pointer dereference
goroutine 11163 [running]:
net/http.(*conn).serve.func1()
/home/sawjan/.gobrew/current/go/src/net/http/server.go:1943 +0xd3
panic({0x35975a0?, 0x75daa80?})
/home/sawjan/.gobrew/current/go/src/runtime/panic.go:783 +0x132
github.com/coreos/go-oidc/v3/oidc.(*Provider).UserInfo(0x54f8498?, {0x54f8498?, 0xc004e62cf0?}, {0x54cd960?, 0xc00582e930?})
/mnt/workspace/opencloud/opencloud/vendor/github.com/coreos/go-oidc/v3/oidc/oidc.go:455 +0x58
github.com/opencloud-eu/opencloud/pkg/middleware.OidcAuth.func2.1({0x54f2e00, 0xc0054c0b80}, 0xc004aaa8c0)
/mnt/workspace/opencloud/opencloud/pkg/middleware/oidc.go:76 +0x3a3
net/http.HandlerFunc.ServeHTTP(0x54e86a8?, {0x54f2e00?, 0xc0054c0b80?}, 0xc0044663d8?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/riandyrn/otelchi.traceware.ServeHTTP({{{0x54df350, 0xc001d21200}, {0x54e9ed0, 0xc001f86750}, {0x54f9348, 0xc0018b89c0}, 0x0, {0x0, 0x0, 0x0}, ...}, ...}, ...)
/mnt/workspace/opencloud/opencloud/vendor/github.com/riandyrn/otelchi/middleware.go:199 +0x129c
github.com/opencloud-eu/opencloud/services/webfinger/pkg/server/http.Server.Version.func16.1({0x54e86a8, 0xc001b28960}, 0xc004aaa780)
/mnt/workspace/opencloud/opencloud/pkg/middleware/version.go:18 +0xfc
net/http.HandlerFunc.ServeHTTP(0xc00193b040?, {0x54e86a8?, 0xc001b28960?}, 0xc004aaa780?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/rs/cors.(*Cors).Handler-fm.(*Cors).Handler.func1({0x54e86a8, 0xc001b28960}, 0xc004aaa780)
/mnt/workspace/opencloud/opencloud/vendor/github.com/rs/cors/cors.go:289 +0x164
net/http.HandlerFunc.ServeHTTP(0x3959a20?, {0x54e86a8?, 0xc001b28960?}, 0xd?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/opencloud-eu/opencloud/pkg/middleware.NoCache.func1({0x54e86a8, 0xc001b28960}, 0xc004aaa780)
/mnt/workspace/opencloud/opencloud/pkg/middleware/header.go:20 +0x309
net/http.HandlerFunc.ServeHTTP(0x780a7bd7a108?, {0x54e86a8?, 0xc001b28960?}, 0x54ea770?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/opencloud-eu/opencloud/pkg/middleware.TraceContext.func1({0x54e86a8, 0xc001b28960}, 0xc004aaa640)
/mnt/workspace/opencloud/opencloud/pkg/middleware/tracing.go:19 +0x168
net/http.HandlerFunc.ServeHTTP(0x54f8498?, {0x54e86a8?, 0xc001b28960?}, 0x54b26a8?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/go-chi/chi/v5/middleware.RequestID.func1({0x54e86a8, 0xc001b28960}, 0xc004aaa500)
/mnt/workspace/opencloud/opencloud/vendor/github.com/go-chi/chi/v5/middleware/request_id.go:76 +0x20e
net/http.HandlerFunc.ServeHTTP(0xc004aaa500?, {0x54e86a8?, 0xc001b28960?}, 0x3c091e0?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/go-chi/chi/v5/middleware.RealIP.func1({0x54e86a8, 0xc001b28960}, 0xc004aaa500)
/mnt/workspace/opencloud/opencloud/vendor/github.com/go-chi/chi/v5/middleware/realip.go:33 +0x95
net/http.HandlerFunc.ServeHTTP(0x54f84d0?, {0x54e86a8?, 0xc001b28960?}, 0x75dfc00?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2322 +0x29
github.com/go-chi/chi/v5.(*Mux).ServeHTTP(0xc0018b89c0, {0x54e86a8, 0xc001b28960}, 0xc004aaa3c0)
/mnt/workspace/opencloud/opencloud/vendor/github.com/go-chi/chi/v5/mux.go:90 +0x2ee
net/http.serverHandler.ServeHTTP({0xc005714c40?}, {0x54e86a8?, 0xc001b28960?}, 0x6?)
/home/sawjan/.gobrew/current/go/src/net/http/server.go:3340 +0x8e
net/http.(*conn).serve(0xc0048335f0, {0x54f8498, 0xc001caa540})
/home/sawjan/.gobrew/current/go/src/net/http/server.go:2109 +0x665
created by net/http.(*Server).Serve in goroutine 476
/home/sawjan/.gobrew/current/go/src/net/http/server.go:3493 +0x485
{"level":"error","service":"proxy","remoteAddr":"127.0.0.1:48528","request-id":"5c92925c-25e1-416c-8708-83e0acc2ba1d","proto":"HTTP/2.0","method":"GET","path":"/.well-known/webfinger","query":"resource=acct:me@localhost","fragment":"","error":"EOF","time":"2026-08-28T09:34:49+05:45","message":"error happened in MultiHostReverseProxy"}
500
2026/08/28 11:18:45 http: TLS handshake error from 127.0.0.1:53050: remote error: tls: bad certificate
{"level":"error","service":"webfinger","error":"Get \"https://localhost:9200/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","time":"2026-08-28T11:18:45+05:45","message":"could not initialize OIDC provider"}
Steps to reproduce
- Start opencloud using binary
- Add account in desktop client
- Error is there
Screencast.from.2026-08-28.09-48-04.mp4
- Check the client logs: OpenCloud.log
OR
- Login to opencloud web
- Note the access token
- Request the webfinger resource
curl 'https://localhost:9200/.well-known/webfinger?resource=acct:me@localhost' \
-H'Authorization: Bearer eyJh...' \
-vk
Expected behavior
Expected to see 200 status code
Actual behavior
Server returns either 502 or 500
Setup
OpenCloud: 7.5.0
- docker image:
opencloudeu/opencloud-rolling:7.5.0✔️ - binary built locally ❌
Note
- image
opencloudeu/opencloud-rolling:7.4.0works ✔️ - binary built locally from
v7.4.0tag doesn't work ❌ - pre-built binary from release 7.4.0 artifact deosn't work ❌
Metadata
Metadata
Assignees
Labels
Type
Projects
- StatusShow more project fieldsDone
Activity
saw-jan commentedon Aug 28, 2026
This one is interesting:
Setup
OpenCloud:
7.5.0opencloudeu/opencloud-rolling:7.5.0✔️saw-jan commentedon Aug 28, 2026
I don't know if this is expected or not
saw-jan commentedon Aug 28, 2026
Very similar to #3107, but I am using bearer token here.
saw-jan commentedon Aug 31, 2026
@fredrikblau @butonic
I can still see the same error.
Tested with commit: 0becbb8
On first try:
On second try: