5ba54df · typeable/oauth2-proxy

git.iko.soy/typeable/oauth2-proxy

NGINX return 403 for sign_in (#2322) (#2323)

Co-authored-by: Sven Ertel <sven.ertel@bayernwerk.de>

commit5ba54df3e7aa9a9528026a0f69e0c1bbc0db9c01 authorWhiteRabbit-Code <sven@ertel-net.de> dateSat 20 Jan 2024, 20:08 (3 years ago) parentbc022fb

3 files changed+4−4

unifiedsplit

contrib/local-environment/nginx.conf+2−2

@@ -20,7 +20,7 @@ server {

2020

2121 # If the auth_request denies the request (401), redirect to the sign_in page

2222 # and include the final rd URL back to the user's original request.

23− error_page 401 = http://oauth2-proxy.oauth2-proxy.localhost/oauth2/sign_in?rd=$scheme://$host$request_uri;

23+ error_page 401 =403 http://oauth2-proxy.oauth2-proxy.localhost/oauth2/sign_in?rd=$scheme://$host$request_uri;

2424

2525 # Alternatively send the request to `start` to skip the provider button

2626 # error_page 401 = http://oauth2-proxy.oauth2-proxy.localhost/oauth2/start?rd=$scheme://$host$request_uri;

@@ -54,7 +54,7 @@ server {

5454

5555 # If the auth_request denies the request (401), redirect to the sign_in page

5656 # and include the final rd URL back to the user's original request.

57− error_page 401 = http://oauth2-proxy.oauth2-proxy.localhost/oauth2/sign_in?rd=$scheme://$host$request_uri;

57+ error_page 401 =403 http://oauth2-proxy.oauth2-proxy.localhost/oauth2/sign_in?rd=$scheme://$host$request_uri;

5858

5959 # Alternatively send the request to `start` to skip the provider button

6060 # error_page 401 = http://oauth2-proxy.oauth2-proxy.localhost/oauth2/start?rd=$scheme://$host$request_uri;

docs/docs/configuration/overview.md+1−1

@@ -371,7 +371,7 @@ server {

371371

372372 location / {

373373 auth_request /oauth2/auth;

374− error_page 401 = /oauth2/sign_in;

374+ error_page 401 =403 /oauth2/sign_in;

375375

376376 # pass information via X-User and X-Email headers to backend,

377377 # requires running with --set-xauthrequest flag

docs/versioned_docs/version-7.5.x/configuration/overview.md+1−1

@@ -370,7 +370,7 @@ server {

370370

371371 location / {

372372 auth_request /oauth2/auth;

373− error_page 401 = /oauth2/sign_in;

373+ error_page 401 =403 /oauth2/sign_in;

374374

375375 # pass information via X-User and X-Email headers to backend,

376376 # requires running with --set-xauthrequest flag