Skip to content

Commit 220b48c

Browse files
authored
Add Path flag to auth_redir cookie
1 parent fb79b38 commit 220b48c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

openid_connect.server_conf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
location @oidc_auth {
22
# Redirect this request to the OpenID Connect identity provider login page for this server{}
33
# Using authorization code flow (nonce sent to IdP is hash of $request_id)
4-
add_header Set-Cookie "auth_nonce=$request_id; HttpOnly;"; # Random value
5-
add_header Set-Cookie "auth_redir=$uri; HttpOnly;"; # So we know where to come back to
4+
add_header Set-Cookie "auth_nonce=$request_id; HttpOnly;"; # Random value
5+
add_header Set-Cookie "auth_redir=$uri; Path=/; HttpOnly;"; # So we know where to come back to
66

77
# This URL should work for most OpenID Connect providers.
88
# Adjust the scope or state values as required

0 commit comments

Comments
 (0)