https url-path about traefik-forward-auth

[thomseddon]

Have you added https://service.domain.com/_oauth in the Google Oauth Console?

[moreiramarti]

I did but the calling url is http and not https.
Do you know why ? Maybe a missing header

[thomseddon]

Sorry I'm not following you, in your example all the URL's had https at the start, so I can't see an issue with that.

Could you give an example request flow?

[moreiramarti]

Sure, I'm call my service with https then I'm redirected to google auth screen but I get a 400 error with the message : the redirect URI in the request, http://service.domain.com/_oauth, does not match the ones authorized for the OAuth client.

I did a wrong copy paste in my initial post. The _oauth url is called with http instead of https.

[thomseddon]

Hmm, are you sure your first request is https? If it is, are you being redirected to http before being redirected to google? (You will have to watch your request log in your browser to check).

[moreiramarti]

I'm pretty sure but I'm doing ssl offloading through haproxy maybe the issue comes from that.

[thomseddon]

Yep, that will be the issue - the way this tool works at the moment is to look at the protocol of the request as received by traefik.

I could look at a way to override this in the future but unfortunately this wouldn't be a quick fix for me

[moreiramarti]

Ok I understand Thanks you for tour help Le mer. 6 févr. 2019 à 18:07, Thom Seddon <[email protected]> a écrit :

…

Yep, that will be the issue - the way this tool works at the moment is to look at the protocol of the request as received by traefik. I could look at a way to override this in the future but unfortunately this wouldn't be a quick fix for me — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#27 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/APxTF3baOEF0QExFWsQRmaEZkIBkmYfYks5vKwvUgaJpZM4alfWY> .