Redirect to auth:4181/provider about traefik-forward-auth

[evgnblkn]

In the Traefik log when accessing whoami:
level=debug msg="Remote error http://auth:4181. StatusCode: 307" middlewareName=oauth@docker middlewareType=ForwardedAuthType

[Rathna-K]

Did you figure it out?
Here is what worked for me:
# labels:
# - 'traefik.enable=true'
# - 'traefik.port=xxx'
# - "traefik.http.middlewares.whoami.redirectscheme.scheme=https"
# - "traefik.http.routers.whoami.middlewares=auth"
# - "traefik.http.routers.whoami-insecure.rule=Host(domain.com)"
# - "traefik.http.routers.whoami-insecure.middlewares= whoami"
# - "traefik.http.routers.whoami.rule=Host(domain.com)"
# - "traefik.http.routers.whoami.entrypoints=websecure"
# - "traefik.http.routers.whoami.tls.certresolver=myresolver"
# - "traefik.http.services.whoami.loadBalancer.server.port=xxx"
I do use a different OIDC though.

@thomseddon great work btw, several years after the service still going strong. Are you still using this or moved away?

[nikolai-in]

Same problem with gitea. @evgnblkn, did you manage to fix it?

[oblq]

I don't know if this is the cause but:
- "PROVIDERS_GENERIC_OAUTH_AUTH_URL=gitia.example2.com/login/oauth/authorize"
------------------------------------> gitia 👆🏼

[monsdar]

You configure traefik.http.middlewares.auth.basicauth, shouldn't it be of type traefik.http.middlewares.auth.forwardauth instead? That way you can also correctly configure address, authResponseHeaders and trustForwardHeader.

UPDATE: Nevermind, just saw that you configure both middleware-types and apply the oauth middleware as needed.