Azure SSO - correct redirect url?

[liferadioat]

Azure SSO - correct redirect url?

[xet7]

@liferadioat

As login method, only popup login currently works. Not redirect login.

[liferadioat]

@liferadioat

As login method, only popup login currently works. Not redirect login.

Thanks, I´ve set it at docker-compose.yml
- OAUTH2_ENABLED=true
# OAuth2 login style: popup or redirect.
- OAUTH2_LOGIN_STYLE=popup

Popup is shown, but there is no redirect after popup is closed. What could I´ve missed?

[xet7]

@liferadioat

Add this:

- DEBUG=true

And after login, write command to see is login successful or not:

docker logs wekan-app

Also, popup needs to be allowed at webbrowser, like Firefox. Some browsers block popups.

[xet7]

@liferadioat

Are you using these settings? Or something else?

https://github.com/wekan/wekan/wiki/Azure

Did you configure redirect/return URL at Azure web console?

[liferadioat]

Yes, this is configured:

The docker log says:

{"line":"87","file":"percolate_synced-cron.js","message":"SyncedCron: Scheduled \"notification_cleanup\" next run @Thu Mar 07 2024 10:37:27 GMT+0000 (Coordinated Universal Time)","time":{"$date":1709807848109},"level":"info"}
{"line":"406","file":"oauth_server.js","message":"Error in OAuth Server: invalid_request","time":{"$date":1709807886564},"level":"warn"}

My docker-compose settings:

      - OAUTH2_ENABLED=true
      # Optional OAuth2 CA Cert, see https://github.com/wekan/wekan/issues/3299
      #- OAUTH2_CA_CERT=ABCD1234
      # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
      #- OAUTH2_ADFS_ENABLED=false
      # Azure AD B2C. https://github.com/wekan/wekan/issues/5242
      #- OAUTH2_B2C_ENABLED=false
      # OAuth2 login style: popup or redirect.
      - OAUTH2_LOGIN_STYLE=popup
      # Application GUID captured during app registration:
      - OAUTH2_CLIENT_ID=6570fe40-xxxx
      # Secret key generated during app registration:
      - OAUTH2_SECRET=9dd29917-xxx
      - OAUTH2_SERVER_URL=https://login.microsoftonline.com/
      - OAUTH2_AUTH_ENDPOINT=/common/oauth2/v2.0/authorize
      - OAUTH2_USERINFO_ENDPOINT=https://graph.microsoft.com/oidc/userinfo
      - OAUTH2_TOKEN_ENDPOINT=/oauth2/v2.0/token
      # The claim name you want to map to the unique ID field:
      - OAUTH2_ID_MAP=email
      # The claim name you want to map to the username field:
      - OAUTH2_USERNAME_MAP=email
      # The claim name you want to map to the full name field:
      - OAUTH2_FULLNAME_MAP=name
      # The claim name you want to map to the email field:
      - OAUTH2_EMAIL_MAP=email

[liferadioat]

I´ve solved it. The docker-compose.yml template is wrong:
#- OAUTH2_SERVER_URL=https://login.microsoftonline.com/
has to be
#- OAUTH2_SERVER_URL=https://login.microsoftonline.com/tenant-id

But there is a little bug: the name of the OIDC login button changes the name when the login works to the default name.