Oauth failure - invalid expiry date

[riazarbi]

Hello,

I'm avoiding putting this in Issues because it's entirely possible it's my error, not a bug.

I'm trying to configure oauth with trino v364. When I deploy, I'm seeing that trino is loading the appropriate configs. However, when I try authenticate via either the webUI or the cli, I get the following error in the coordinator logs -

2022-04-05T20:07:31.871Z    DEBUG    http-worker-223    io.trino.server.security.oauth2.OAuth2Service    Authentication response could not be verified: state=eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJ0cmlub19vYXV0aF91aSIsImV4cCI6MTY0OTE5MDE0MX0.cktc3i5s-8IoSxSehdUQbRyeyABO2iHx1g0wVQEHXoQ
io.trino.server.security.oauth2.ChallengeFailedException: no valid expiration date

When I use the debug console in my browser (I tried both Firefox and Chrome) the request cookie expiration date is reasonable - it's set 15m into the future - and the response cookie, which is a delete cookie, has an expiry value of 0.

Am I doing anything silly?

More detail -

I'm authenticating against a self hosted gitlab instance, and my config looks something like this -

    http-server.authentication.type=PASSWORD,OAUTH2
    http-server.process-forwarded=true
    http-server.authentication.oauth2.issuer=https://REDACTED/ds_gitlab
    http-server.authentication.oauth2.auth-url=https://REDACTED/ds_gitlab/oauth/authorize
    http-server.authentication.oauth2.token-url=https://REDACTED/ds_gitlab/oauth/token
    http-server.authentication.oauth2.userinfo-url=https://REDACTED/ds_gitlab/oauth/userinfo
    http-server.authentication.oauth2.jwks-url=https://REDACTED/ds_gitlab/oauth/discovery/keys
    http-server.authentication.oauth2.challenge-timeout=15m
    http-server.authentication.oauth2.state-key=d37d16REDACTED8104f3e837b9b01d7454
    http-server.authentication.oauth2.principal-field=username
    http-server.authentication.oauth2.user-mapping.pattern=(.*)
    http-server.authentication.oauth2.client-id=cb4ff82e8c26d4933cREDACTED9d16f800f0df5c1cb
    http-server.authentication.oauth2.client-secret=9REDACTED7ef6a92f6660e7d7cfe9dcd872
    web-ui.authentication.type=oauth2