Self-hosted carbonserver fails with "Unknown client"

[JZschache]

Describe the bug

I started a self-hosted carbonserver as described here. The dashboard is available at http://codecarbon.local and the fief server is running at http://fief.localhost. But after login with Fief admin credentials, an error is thrown: "Authorize: Unknown client".

To Reproduce
Steps to reproduce the behavior:

1. ./deploy/deploy.py setup
2. adjust /etc/hosts
3. ./deploy/deploy.py start --traefik --fief --codecarbon
4. Go to http://codecarbon.local
5. Click on 'Sign in or create an account'
6. Login with Fief admin credentials

Expected behavior
See the dashboard

Screenshots

Desktop (please complete the following information):

• OS: Ubuntu 22.04
• Python Version 3.10
• CodeCarbon Version 3.0.8

Additional context
Add any other context about the problem here.

[benoit-cty]

Hello,
Sorry for the late reply, we all were at a conference. @SaboniAmine may know how to help you.

Are you aware that our hosted public API instance is free to use ?
Do you want to self-host for privacy reason ?

Fief is deprecated and we are going to replace it in early 2026.

[JZschache]

Thanks. I already knew about the free-to-use instance. And yes, a self-hosted version increases data privacy.

[SaboniAmine]

Hi @JZschache.
Thanks for reporting this issue. The deploy script is quite sensitive as it orchestrates both the deploy & configuration of the stack components, for multiple targets (local / remote auth, backend, etc.). To help the debug, could you provide an example of the .env.fief generated file, while masking values ? Can you check that in the fief instance, that the clients are correctly created ?
You should see at least :

• a public client, with name starting with codecarbon
• a confidential one, for the CLI

ping @prmths128

[JZschache]

Hi @prmths128

here is the content of .env.fief:

# Reference: https://docs.fief.dev/self-hosting/environment-variables/
SECRET=<MASKED>
FIEF_CLIENT_ID=<MASKED>
FIEF_CLIENT_SECRET=<MASKED>
ENCRYPTION_KEY=<MASKED>
PORT=8000

CLIENT_REDIRECT_URI_SSL_REQUIRED=False
# Set your domain name here
FIEF_DOMAIN=inigopc.local:8000
# Set your email address here
FIEF_MAIN_USER_EMAIL=admin@mydomain.com
FIEF_MAIN_USER_PASSWORD=<MASKED>
CSRF_COOKIE_SECURE=False
LOGIN_SESSION_COOKIE_SECURE=False
SESSION_COOKIE_SECURE=False
FIEF_ADMIN_SESSION_COOKIE_SECURE=False
ALLOW_ORIGIN_REGEX=*


# Read more: https://docs.fief.dev/self-hosting/configuration/database/
DATABASE_TYPE=POSTGRESQL
DATABASE_HOST=postgres-fief
DATABASE_PORT=5432
DATABASE_USERNAME=fief
DATABASE_PASSWORD=<MASKED>
DATABASE_NAME=fief

# Read more: https://docs.fief.dev/self-hosting/environment-variables/#redis
REDIS_URL=redis://redis:6379

# Read more: https://docs.fief.dev/self-hosting/configuration/ssl/
FORWARDED_ALLOW_IPS=*

I don't see the clients that you mentioned. I have:

• Default's client - Confidential
• cli - Public

Both clients have the same redirect URIs:

    https://codecarbon.local/auth/login
    http://codecarbon.local/auth/login
    https://fief.local/docs/oauth2-redirect
    https://fief.local/admin/auth/callback
    http://fief.local/docs/oauth2-redirect
    http://fief.local/admin/auth/callback
    http://fief.local/callback
    http://localhost/callback
    http://localhost:51562/callback