500 - NGINX / OpenID Connect login failure

[MrVidipy]

Hello,

I was using GrDF Gazpar for quite a while now and was working until a few days when I found error logs 500 - NGINX / OpenID Connect login failure.

When trying to use jsonSample.py to test from where it was coming, I have the same error:

An unexpected error occured while loading the data
Traceback (most recent call last):
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/client.py", line 71, in load_date_range
    res = self.__dataSource.load(pce_identifier, start_date, end_date, frequencies)
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/datasource.py", line 87, in load
    self._api_client.login()
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/api_client.py", line 107, in login
    raise ServerError(
pygazpar.api_client.ServerError: An error occurred while getting the auth token. Status code: 500 - NGINX / OpenID Connect login failure

Traceback (most recent call last):
  File "/home/user/projets/gaz/PyGazpar/samples/jsonSample.py", line 31, in <module>
    sys.exit(main())
  File "/home/user/projets/gaz/PyGazpar/samples/jsonSample.py", line 21, in main
    data = client.load_since(
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/client.py", line 59, in load_since
    res = self.load_date_range(pce_identifier, start_date, end_date, frequencies)
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/client.py", line 71, in load_date_range
    res = self.__dataSource.load(pce_identifier, start_date, end_date, frequencies)
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/datasource.py", line 87, in load
    self._api_client.login()
  File "/home/user/.local/lib/python3.10/site-packages/pygazpar/api_client.py", line 107, in login
    raise ServerError(
pygazpar.api_client.ServerError: An error occurred while getting the auth token. Status code: 500 - NGINX / OpenID Connect login failure

I have the same issue in my home assistant setup with Gazpar2HAWS where I have also the following trace :
2025-07-11 12:59:44,632 DEBUG [urllib3.connectionpool] https://monespace.grdf.fr:443 "GET /_codexch?state=%2F&error=access_denied&error_description=The+resource+owner+or+authorization+server+denied+the+request. HTTP/1.1" 500 37

Credentials are good and I can connect manually to my dashboard on grdf website.

Anybody with the same issue ?

[airvb]

Bonjour ,

Same snag .
2025-07-10 18:07:02,536 ERROR: An unexpected error occured while getting the PCE identifiers
Traceback (most recent call last):
File "/app/pygazpar/client.py", line 44, in get_pce_identifiers
res = self.__dataSource.get_pce_identifiers()
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/pygazpar/datasource.py", line 72, in get_pce_identifiers
self._api_client.login()
File "/app/pygazpar/api_client.py", line 109, in login
raise ServerError(
pygazpar.api_client.ServerError: An error occurred while getting the auth token. Status code: 500 - NGINX / OpenID Connect login failure

Connection via web site is ok

[Masha76490]

Bonjour j'ai la même erreur mais site web ok aussi.

[airvb]

obviously the same problem
https://github.com/ssenart/home-assistant-gazpar/issues/81

[laurentftech]

Hello,

I did some network analysis with my browser's developer tools and I think I found the root cause of the login issue. It seems the authentication flow has been completely changed, likely to an Okta-based multi-step process.

Here are the key differences:

1. The login endpoint URL has changed.

• Old URL (used by PyGazpar): https://connexion.grdf.fr/api/v1/authn
• New URL (used by the browser): https://connexion.grdf.fr/idp/idx/identify

2. The initial POST request payload is different and does not contain the password.

• The browser sends a POST request to the new URL with the following JSON payload. The key is that it sends an identifier and a stateHandle, not a username and password.

[adrienyhuel]

Hello,

Looks like GRDF now use Okta with OpenID Connect to login to account :

First redirection when we want to login goes to :
https://connexion.grdf.fr/oauth2/aus5y2ta2uEHjCWIR417/v1/authorize?response_type=code&scope=openid+profile+email&client_id=0oa95ese18blzdg3p417&state=%2F&redirect_uri=https://monespace.grdf.fr/_codexch&nonce=...&by_pass_okta=1&capp=meg

Maybe the lib will have to use OIDC, but with this connexion method, browser interaction is mandatory...

I can't find any documentation explaining how to use their APIs...

[MrVidipy]

I think I might have a fix, I'll clean it up, make some tests and make a PR.

[miquelfr]

bonjour, le problème est-il corrigé?

merki

[MrVidipy]

bonjour, le problème est-il corrigé?

merki

Bonjour, la solution a été trouvée (voir PR #90) mais on attend qu'elle soit merge par @ssenart

[ssenart]

Hello tous, je regarde pour merger ça au plus tôt. Merci pour votre analyse et votre travail !

[ssenart]

Les tests ne passent sur la PR #90.

Je ne comprend pas car ils passent bien en local.