Skip to content

Common Issues

Check:

  • AUTH_OKTA_ID, AUTH_OKTA_SECRET, AUTH_OKTA_ISSUER
  • AUTH_SECRET
  • Okta callback URL matches /api/auth/callback/okta

Check:

  • NEXT_PUBLIC_CONVEX_URL is set and reachable
  • Convex deployment has server records
  • User session is authenticated

From dashboard host (or reachable network segment):

Terminal window
curl https://<server>:<port>/api/health

Use the configured scheme/port from your [api] config or reverse-proxy/TLS settings.

If unreachable:

  • Confirm firewall rules
  • Confirm license-monitor is running
  • Confirm bind settings in [api] (these still apply to the upstream service when using a proxy/TLS front end)

On monitored host, test monitor command locally:

Terminal window
license-monitor --test --execute "lmstat -a"

Then verify API output:

Use the configured scheme/port from your [api] config or reverse-proxy/TLS settings:

Terminal window
curl <scheme>://<host>:<port>/api/licenses?refresh=true

Convex scheduled checks fail for private servers

Section titled “Convex scheduled checks fail for private servers”

Convex-hosted jobs must be able to reach monitored hosts. For private-only hosts, use a reachable proxy path or private-network-compatible architecture.