Skip to content

Commit 1e1b755

Browse files
authored
Preserve complete URI in auth_redir cookie
1 parent e903153 commit 1e1b755

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

openid_connect.server_conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# Redirect this request to the OpenID Connect identity provider login page for this server{}
33
# Using authorization code flow (nonce sent to IdP is hash of $request_id)
44
add_header Set-Cookie "auth_nonce=$request_id; Path=/; HttpOnly;"; # Random value
5-
add_header Set-Cookie "auth_redir=$uri; Path=/; HttpOnly;"; # So we know where to come back to
5+
add_header Set-Cookie "auth_redir=$request_uri; Path=/; HttpOnly;"; # So we know where to come back to
66

77
# This URL should work for most OpenID Connect providers.
88
# Adjust the scope or state values as required

0 commit comments

Comments
 (0)