Invalid X-Requested-With header - Authentication failed, Failed to obtain access token

[regic]

I am using Istio as an ingress gateway and trying to setup okta within a sidecar proxy but keep running into a ‘Invalid X-Requested-With header’ error. istio holds the self-signed cert to my app myapp.com that gateway has mTLS enabled to my service via TCP 7000 which then communicates with a nodejs app using http://www.passportjs.org/packages/passport-okta-oauth/

Okta is setup as follows all (HTTPS):

Login redirect: myapp.com/api/auth/okta/handler/frame
Logout: myapp.com/api/auth/okta/logout
Initiate Login: myapp/api/auth/okta/start

App logs:

GET /api/auth/okta/refresh?optional&env=development
GET /api/auth/okta/start?scope=openid%20email%20profile%20offline_access&env=development

Front end error is: Authentication failed, Failed to obtain access token

Anyone have any idea’s as to what the issue is?

[Lijia]

@regic Can you please open a support ticket through an email to support@okta.com with this issue? One of our Developer Support Engineers will take the case and assist you in narrowing down the cause of the issue. Thanks