New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow dex to work at non base url #521
Allow dex to work at non base url #521
Conversation
@xaka has noted that most proxies trim the prefix of all paths. For instance the following nginx config trims
Therefore, while URLs rendered in the HTML need to be absolute from the issuer URL, the actual paths that handlers are registered on shouldn't be. @alon-argus was wondering if you had any comments on this point. |
c3c23f0
to
435cadf
Compare
Have gone through the local and gmail flows with registration and email verification. Think I got all the edge cases. |
Going to do another round of manual testing and add some documentation to the issuer flat. |
tested locally with http proxy, etc. so LGTM 👍 |
The discovery URL has changed and now ends with /dex. As the scripts were updated in dexidp#525, the documentation was not. Broken since dexidp#521. [skip ci] Signed-off-by: Julien Pivotto <roidelapluie@inuits.eu>
* In a9dce1c, the defaults are set to the `.example` paths, except for `emailer.json` which is instead committed into the git repository. So there's no need to duplicate those file in order to start dex-worker. * The default value for discovery is moved from `/` to `/dex` in dexidp#521 * Typo in `client-secret` value.
This change updates #520 by having the handlers register using the issuerURL. It also updates the development environment by having the dex-worker and examle-app default to a non-base URL. This will hopefully catch any future bugs that assume operating from a root path.
Going to have to manually test all the connectors and registration flows :( Until then, do not merge.
Closes #502