oauth2-proxy/contrib
Stefan Markmann ec4adb4aa9
docs(nginx): Clarify auth_request redirect pattern with named location
Update the nginx integration documentation to recommend using a named location
(@oauth2_signin) for the error_page directive instead of the previous
'error_page 401 =403' approach.

The named location pattern ensures the browser receives a proper 302 redirect,
which is required for --skip-provider-button=true to work correctly.

The previous pattern (error_page 401 =403 /oauth2/sign_in) returned a 403
status with a Location header. Browsers do not auto-follow redirects on 403
responses, causing users to see a 'Found.' link instead of being automatically
redirected to the IdP.

Changes:
- Updated main nginx example to use @oauth2_signin named location
- Added 'Understanding the error_page redirect pattern' section
- Added warning about the limitations of 'error_page 401 =403'
- Updated local test environment (contrib/local-environment/nginx.conf)

Refs: #334
Signed-off-by: Stefan Markmann <stefan@markmann.net>
2026-01-18 00:48:41 +01:00
..
local-environment docs(nginx): Clarify auth_request redirect pattern with named location 2026-01-18 00:48:41 +01:00
oauth2-proxy.cfg.example feat: adding scope to oauth2-proxy.cfg.example (#2489) 2024-03-30 15:36:17 +07:00
oauth2-proxy.service.example fix(contrib): revamped systemd service example (#2655) 2024-10-13 20:00:54 +02:00
oauth2-proxy_autocomplete.sh feat: readiness check (#1839) 2022-12-23 09:08:12 +00:00