c3v3l (c3v3l) asked a question.
Each time I try and log into an app, I get stuck on "Verifying your identity" for a minute:
This is caused by the request to `POST http://127.0.0.1:8769/challenge` taking a minute:
the relevant part of the logs, where for some reason Okta Verify is failing to connect:
```
2024/04/15 10:31:10:023 -0400 {✅ "Loopback": {"message": "Connection124: New loopback connection", "defaultProperties": "", "location": "ServerConnection.swift:start():47"}}
...
2024/04/15 10:32:10:227 -0400 {🛑 "Handle Challenge Request": {"message": "key set fetch failed Received an error from the server: Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={_kCFStreamErrorCodeKey=-2102, NSUnderlyingError=0x600000af9e30 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "(null)" UserInfo={_kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4}}, _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <<task_id>>.<1>, _NSURLErrorRelatedURLSessionTaskErrorKey=(
"LocalDataTask <<task_id>>.<1>"
), NSLocalizedDescription=The request timed out., NSErrorFailingURLStringKey=https://<domain>.okta.com/.well-known/openid-configuration, NSErrorFailingURLKey=https://<domain>.okta.com/.well-known/openid-configuration, _kCFStreamErrorDomainKey=4}", "defaultProperties": "", "location": "JWKSFetcher.swift:fetchJWKS(issuerURL:completionHandler:):76"}}
2024/04/15 10:32:10:228 -0400 {✅ "Handle Challenge Request": {"message": "in processKeysFetch for jwt: <JWT>, result: failure(AuthFoundation.OAuth2Error.network(error: AuthFoundation.APIClientError.serverError(Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={_kCFStreamErrorCodeKey=-2102, NSUnderlyingError=0x600000af9e30 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "(null)" UserInfo={_kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4}}, _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <<task_id>>.<1>, _NSURLErrorRelatedURLSessionTaskErrorKey=(
"LocalDataTask <<task_id>>.<1>"
), NSLocalizedDescription=The request timed out., NSErrorFailingURLStringKey=https://<domain>.okta.com/.well-known/openid-configuration, NSErrorFailingURLKey=https://<domain>.okta.com/.well-known/openid-configuration, _kCFStreamErrorDomainKey=4})))", "defaultProperties": "", "location": "JWTValidator.swift:processKeysFetch(for:result:completion:):60"}}
2024/04/15 10:32:10:228 -0400 {🛑 "OIDC Auth": {"message": "Failure to get key set: network(error: AuthFoundation.APIClientError.serverError(Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={_kCFStreamErrorCodeKey=-2102, NSUnderlyingError=0x600000af9e30 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "(null)" UserInfo={_kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4}}, _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <<task_id>>.<1>, _NSURLErrorRelatedURLSessionTaskErrorKey=(
"LocalDataTask <<task_id>>.<1>"
), NSLocalizedDescription=The request timed out., NSErrorFailingURLStringKey=https://<domain>.okta.com/.well-known/openid-configuration, NSErrorFailingURLKey=https://<domain>.okta.com/.well-known/openid-configuration, _kCFStreamErrorDomainKey=4}))", "defaultProperties": "", "location": "JWTValidator.swift:processKeysFetch(for:result:completion:):75"}}
2024/04/15 10:32:10:248 -0400 {🛑 "Handle Challenge Request": {"message": "Challenge Request JWT validation error: Received an error from the server: Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={_kCFStreamErrorCodeKey=-2102, NSUnderlyingError=0x600000af9e30 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "(null)" UserInfo={_kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4}}, _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <<task_id>>.<1>, _NSURLErrorRelatedURLSessionTaskErrorKey=(
"LocalDataTask <<task_id>>.<1>"
), NSLocalizedDescription=The request timed out., NSErrorFailingURLStringKey=https://<domain>.okta.com/.well-known/openid-configuration, NSErrorFailingURLKey=https://<domain>.okta.com/.well-known/openid-configuration, _kCFStreamErrorDomainKey=4}", "defaultProperties": "", "location": "AuthenticationManager.swift:verifyChallengeRequest(_:_:issuerURL:context:completion:):305"}}
2024/04/15 10:32:10:249 -0400 {🛑 "Handle Challenge Request": {"message": "Challenge validation failed, Received an error from the server: Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={_kCFStreamErrorCodeKey=-2102, NSUnderlyingError=0x600000af9e30 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "(null)" UserInfo={_kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4}}, _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <<task_id>>.<1>, _NSURLErrorRelatedURLSessionTaskErrorKey=(
"LocalDataTask <<task_id>>.<1>"
), NSLocalizedDescription=The request timed out., NSErrorFailingURLStringKey=https://<domain>.okta.com/.well-known/openid-configuration, NSErrorFailingURLKey=https://<domain>.okta.com/.well-known/openid-configuration, _kCFStreamErrorDomainKey=4}", "defaultProperties": "", "location": "AuthenticationFlowCoordinator.swift:authenticate(completion:):198"}}
```
even though I am easily able to open up those pages in my browser.
Hello @c3v3l (c3v3l) Thank you for reacting out to our Community!
This seems to be some kind of network issue. Are you using a VPN or were there changes recently on your network that lead to this issue?
You might need to allowlist Okta URL's or the problem could be with the ports 651XX, where they do not allow specific trafic on them.
Please try the resolution on the article below and see if anything changes:
https://support.okta.com/help/s/article/unable-to-enroll-okta-verify-on-windows?language=en_US
--
Subscribe Today: The Okta Community is on YouTube