fixes

Author: GitTimeraider

app/templates/oidc_settings.html

@@ -79,7 +79,7 @@ <h5 class="border-bottom pb-2">Basic Configuration</h5>
                             {{ form.discovery_endpoint.label(class="form-label") }}
                             {{ form.discovery_endpoint(class="form-control") }}
                             <small class="form-text text-muted">
-                                OIDC Discovery URL (usually ends with .well-known/openid-configuration)
+                                OIDC Discovery URL (optional if discovery endpoint is blocked/restricted - leave blank to use manual endpoints below)
                             </small>
                             {% if form.discovery_endpoint.errors %}
                                 <div class="text-danger mt-1">
@@ -89,6 +89,57 @@ <h5 class="border-bottom pb-2">Basic Configuration</h5>
                                 </div>
                             {% endif %}
                         </div>
+                        
+                        <div class="alert alert-info">
+                            <i class="fas fa-info-circle me-2"></i>
+                            <strong>Manual Endpoints:</strong> If your identity provider blocks the discovery endpoint (403 Forbidden), 
+                            leave the Discovery Endpoint blank and fill in the three manual endpoints below instead.
+                        </div>
+                        
+                        <div class="mb-3">
+                            {{ form.authorization_endpoint.label(class="form-label") }}
+                            {{ form.authorization_endpoint(class="form-control") }}
+                            <small class="form-text text-muted">
+                                Manual authorization endpoint (required if discovery is blocked)
+                            </small>
+                            {% if form.authorization_endpoint.errors %}
+                                <div class="text-danger mt-1">
+                                    {% for error in form.authorization_endpoint.errors %}
+                                        <small>{{ error }}</small>
+                                    {% endfor %}
+                                </div>
+                            {% endif %}
+                        </div>
+                        
+                        <div class="mb-3">
+                            {{ form.token_endpoint.label(class="form-label") }}
+                            {{ form.token_endpoint(class="form-control") }}
+                            <small class="form-text text-muted">
+                                Manual token endpoint (required if discovery is blocked)
+                            </small>
+                            {% if form.token_endpoint.errors %}
+                                <div class="text-danger mt-1">
+                                    {% for error in form.token_endpoint.errors %}
+                                        <small>{{ error }}</small>
+                                    {% endfor %}
+                                </div>
+                            {% endif %}
+                        </div>
+                        
+                        <div class="mb-3">
+                            {{ form.userinfo_endpoint.label(class="form-label") }}
+                            {{ form.userinfo_endpoint(class="form-control") }}
+                            <small class="form-text text-muted">
+                                Manual userinfo endpoint (required if discovery is blocked)
+                            </small>
+                            {% if form.userinfo_endpoint.errors %}
+                                <div class="text-danger mt-1">
+                                    {% for error in form.userinfo_endpoint.errors %}
+                                        <small>{{ error }}</small>
+                                    {% endfor %}
+                                </div>
+                            {% endif %}
+                        </div>
                     </div>
 
                     <div class="mb-4">