Repository navigation
v0.7.0
The sign-in relay can live under a site's own path.
PUBLIC_URLfor the relay. Set it to where the browser reaches the relay — e.g.
https://example.com/cms-auth— and the relay answers under that path, sends sign-in back to
…/cms-auth/callback, and keeps its cookies to that path. So the relay can run on the site's own
server without a domain of its own, and a reverse proxy that hands it plainhttpno longer
puts the wrong address in the callback. Without it, nothing changes. See
auth/README.md.