Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

OIDC SSO does not work with documented reverse-proxy settings #9050

Closed
richvdh opened this issue Jan 8, 2021 · 1 comment · Fixed by #9288
Closed

OIDC SSO does not work with documented reverse-proxy settings #9050

richvdh opened this issue Jan 8, 2021 · 1 comment · Fixed by #9288
Assignees
@richvdh

Comments

@richvdh
Copy link
Member

richvdh commented Jan 8, 2021 •
edited
Loading

per the reverse-proxy docs, https://github.com/matrix-org/synapse/blob/master/docs/reverse_proxy.md, you only need to forward /_matrix and /_synapse/client to synapse.

However, the OIDC login flow calls back to /_synapse/oidc/callback, so people following the documentation get a 404.
@richvdh
Copy link
Member Author

richvdh commented Jan 8, 2021

The solution to this is probably to change the callback URI to /_synapse/client/oidc/callback. In the meantime a workaround is to forward /_synapse/oidc through the reverse-proxy.

@richvdh richvdh self-assigned this Jan 8, 2021
@richvdh richvdh mentioned this issue Feb 1, 2021
Merged
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@richvdh richvdh

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Put OIDC callback URI under /_synapse/client. matrix-org/synapse
1 participant
@richvdh