Empty "state=" parameter causes error with OIDC providers.

[terrancesnyder]

Describe the bug

The URL generated for OIDC authentication has an empty and invalid "state" property.

To Reproduce

• Configure operate to use OIDC provider
• Try to login
• Ory Hydra rejects request because URL contains invalid empty "state=" parameter.

Current behavior

Expected behavior

State should be populate. See below where "withState(...)" could be called with random string.

See code here, which isn't generating state parameter...

https://github.com/camunda/zeebe/blob/main/operate/webapp/src/main/java/io/camunda/operate/webapp/security/sso/Auth0Service.java#L120

Empty state

Results in

Environment

• Docker

Additional context

      - CAMUNDA_IDENTITY_TYPE=GENERIC
      - CAMUNDA_IDENTITY_ISSUER=https://secure.dev.klustr.io/hydra
      - CAMUNDA_IDENTITY_ISSUER_BACKEND_URL=https://secure.dev.klustr.io/hydra
      - CAMUNDA_IDENTITY_CLIENT_ID=xxxxxxxxxxxxxx
      - CAMUNDA_IDENTITY_CLIENT_SECRET=xxxxxxxxx

---

Acceptance Criteria

Definition of Ready - Checklist

• The bug has been reproduced by the assignee in the environment compatible with the provided one; otherwise, the issue is closed with a comment
• The issue has a meaningful title, description, and testable acceptance criteria
• The issue has been labeled with an appropriate Bug-area label
• Necessary screenshots, screen recordings, or files are attached to the bug report

For UI changes required to solve the bug:

• Design input has been collected by the assignee

Implementation

🔍 Root Cause Analysis

💭 Proposed Solution

👉 Handover Dev to QA

• Changed components:
• Side effects on other components:
• Handy resources:
  BPMN/DMN models, plugins, scripts, REST API endpoints + example payload, etc :
• Example projects:

• Commands/Steps needed to test; Versions to validate:

• Docker file / HELM chart : in case that it needed to be tested via docker share the version contain the fixed along with version of other services .

• Release version ( in which version this fixed/feature will be released):

📗 Link to the test case

[johanwelgemoed]

Spend small time box to determine if anything is needed on Operate or all on Identity side.