Gitlab duo provider is not working with Self Hosted instances.

[gaetan-puleo]

Description

I am using Opencode with a self hosted gitlab instance.
I got an error when trying to send a message.

GitlabError: Failed to get direct access token: 403 Forbidden - {"Message":"403 Forbidden"}

I use the PAT method to login. (Even Gitlab show the token to be used recently).

Plugins

No response

OpenCode version

No response

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

macos sonoma 14.8.2

Terminal

kitty / iterm2

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• GitLab Duo /models selection still responds as Claude 3.5 Sonnet #8367: GitLab Duo /models selection still responds as Claude 3.5 Sonnet - This issue also involves GitLab Duo provider problems with authentication/configuration
• [FEATURE]: Add GitLab Duo Agentic Chat Provider Support #7455: [FEATURE]: Add GitLab Duo Agentic Chat Provider Support - The feature request tracking GitLab Duo support for both GitLab.com and self-hosted instances
• opencode error when starting the command #8509: opencode error when starting the command - Another GitLab-related error ("TypeError: undefined is not an object (evaluating 'input.id')") that may be related

Feel free to ignore if none of these address your specific case.

[gaetan-puleo]

@vglafirov I created an issue for Gitlab instances

[vglafirov]

@gaetan-puleo Could you please provide GitLab version you are currently running?

[gaetan-puleo]

@vglafirov v18.6.1-ee

[NicFontana]

Same here on v18.7.1-ee

[vglafirov]

Thanks for posting the versions. They are relatively new, which is good. Could you please tell me if you use OAuth or PAT authentication? Could you please try both methods? If it's PAT, make sure it has API access, if PAT is old, try to create a new one and test it.

[gaetan-puleo]

@vglafirov I created a PAT yesterday with API Access, but I couldn't use Oauth because OpenCode tried to log me in gitlab.com and not the self hosted instance. I'll try again

[gaetan-puleo]

Same behavior using /connect and selecting gitlab duo (oauth method)

[gaetan-puleo]

When using "opencode auth login" I can enter a gitlab instance URL. Ok we need to avoid using /connect when opencode is running.

[gaetan-puleo]

"Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method."

I guess oauth is not possible with my instance

[vglafirov]

Yeah, for OAuth you might need to register your own application. I am currently investingating this. I will keep you posted.

[vglafirov]

Another question: Have you tried Duo-CLI ? Does this work for you? It doesn't mean we should not fix OpenCode, it's a part of debug process :) Trying to find the difference.

[gaetan-puleo]

Another question: Have you tried Duo-CLI ? Does this work for you? It doesn't mean we should not fix OpenCode, it's a part of debug process :) Trying to find the difference.

I just connected duo cli to the instance and try to send a message, it works and it can find my project @vglafirov