# Authentication problems with solidcommunity.net only **URL:** \ **Category:** Build a Solid App\ **Created:** [May 17, 2024, 11:42am UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517 "2024-05-17T11:42:24Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![pduchesne](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/pduchesne/32/4307_2.png) [@pduchesne](https://forum.solidproject.org/u/pduchesne)\ **Post date:** [May 17, 2024, 11:42am UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/1 "2024-05-17T11:42:24Z")
Hello all, I’m developing several apps on top of Solid, and testing them regularly against various pod providers. I’ve been having problems specifically with [solidcommunity.net](http://solidcommunity.net) (at least recently - I think it used to work months ago, but not sure) with the authentication flow, while it works with all other providers I could test (podspaces, solidweb, teamId, [inrupt.net](http://inrupt.net), …) Here’s what happens : (my understanding of the auth flow is very basic - please bear with my approximate description of the problem) - I have a basic browser app that requires the user to log in, and then fetch some resources. Nothing fancy. - I’m using the inrupt solid client lib and inrupt react hooks and contexts to implement this - on first login, while the session object looks ok and I appear to have an authenticated fetch function, all HTTP requests end up with a 403 - only after refreshing the page (and triggering the restoreSession behaviour of the inrupt lib), the requests succeed as expected - upon inspection of the network logs, it appears that the failing requests use a Bearer authentication token, while the succeeding requests have a DPop token type - with all other providers, the HTTP log looks the same (both during the auth handshake, and when requesting resources), but in that case the Bearer token is accepted. Does that ring a bell to anyone ? Two more remarks : - i’m mentioning the Bearer token thing, because it’s the only difference I notice. Maybe it’s totally irrelevant. - among the other succesfully tested providers, there is inrupt. net , which is also a NSS instance (albeit a 5.7.10, while solidcommunity is 5.7.11 at the time of writing) thanks ---
**Author:** ![jeffz](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jeffz/32/600_2.png) [@jeffz](https://forum.solidproject.org/u/jeffz)\ **Post date:** [May 17, 2024, 2:46pm UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/2 "2024-05-17T14:46:50Z")
@bourgeoa and @gaz009 ^^. ---
**Author:** ![gaz009](https://avatars.discourse-cdn.com/v4/letter/g/a5b964/32.png) [@gaz009](https://forum.solidproject.org/u/gaz009)\ **Post date:** [May 17, 2024, 5:20pm UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/3 "2024-05-17T17:20:40Z")
Hey, I think I know the answer to this one. One of the supporting libraries which the NodeSolidServer uses is nodesolidserver/oidc-op. An open issue that hasn’t been addressed is the usage of the DPoP access token returning a token type of “bearer” as you can see [here](https://github.com/nodeSolidServer/oidc-op/blob/b90ae175d6ed53e5f4f83d46fa4235e4d7b5c807/src/DpopAccessToken.js#L132). It’s an open issue I haven’t gotten around to merging/fixing yet, as most users of NSS to my knowledge are still using the Bearer token type. It also doesn’t make use of the “webid” claim yet. ---
**Author:** ![pduchesne](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/pduchesne/32/4307_2.png) [@pduchesne](https://forum.solidproject.org/u/pduchesne)\ **Post date:** [May 17, 2024, 6:01pm UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/4 "2024-05-17T18:01:44Z")
does that explain the fact that it works ok with [inrupt.net](http://inrupt.net), running on almost the same version of the NSS ? ---
**Author:** ![gaz009](https://avatars.discourse-cdn.com/v4/letter/g/a5b964/32.png) [@gaz009](https://forum.solidproject.org/u/gaz009)\ **Post date:** [May 17, 2024, 6:12pm UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/5 "2024-05-17T18:12:26Z")
Sorry, I thought your original post said “[inrupt.com](http://inrupt.com)”. You’re right, [inrupt.net](http://inrupt.net) is running 5.7.10, but there were no changes to any of the OIDC components of NSS from 5.7.10 to 5.7.11. Only unit tests were changed. It also appears the OIDC documents are the same for both of them, so you should be receiving the same response. Two questions: 1. You are testing against [solidcommunity.net](http://solidcommunity.net) and not [solidcommunity.net:8443](http://solidcommunity.net:8443), correct? 2. You are receiving a Bearer ID token, redeeming it for a Bearer Access token, and using this access token is sending you a 403? If you could open an issue at [the repository](https://github.com/nodeSolidServer/node-solid-server/issues) with more information, I respond more frequently there. ---
**Author:** ![pduchesne](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/pduchesne/32/4307_2.png) [@pduchesne](https://forum.solidproject.org/u/pduchesne)\ **Post date:** [June 12, 2024, 12:29pm UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/6 "2024-06-12T12:29:28Z")
sorry it took me so long to get back to you. I have more information in the mean time : - the problem arises with [inrupt.net](http://inrupt.net) too (it’s just that [inrupt.net](http://inrupt.net) pods have the root public by default, so the auth problem did not show at first glance). So it is indeed a NSS behaviour. - the cause of the problem was because I set the login options to use ‘Bearer’ instead of DPoP. Settting it back to DPoP solves it. So I suppose the NSS simply does not support Bearer as a token type ? In which case sorry for my mistake; i won’t file an issue in the repo then. thx. ---
**Author:** ![gaz009](https://avatars.discourse-cdn.com/v4/letter/g/a5b964/32.png) [@gaz009](https://forum.solidproject.org/u/gaz009)\ **Post date:** [June 23, 2024, 5:13pm UTC](https://forum.solidproject.org/t/authentication-problems-with-solidcommunity-net-only/7517/7 "2024-06-23T17:13:34Z")
It should be supporting the Bearer token type, but the OIDC libraries written for NSS are rather old and unmaintained. I had plans to update them a while back but I am currently busy with a different project. One other potential project is having an open-source Solid-OIDC compliant authorization server. Right now, the Solid-compliant server implementations - that I am aware of - provide AS (Authorization Server)/RS (Resource server) or just RS, but there is no standalone AS implementation.