🐛 Bug Report: Clients that uses well known openid-configuration will allways redirected to http://localhost:1411 #191

Closed
opened 2025-10-07 23:57:04 +03:00 by OVERLORD · 4 comments
Owner

Originally created by @P1tt187 on GitHub.

Reproduction steps

I configured gitea to use Pocket-id.
it uses https://pocket-id.home.lan/.well-known/openid-configuration
My Pocketid instance runs behind traefik.

 labels:
      - "traefik.enable=true"
      - "traefik.http.routers.pocket-id.entrypoints=websecure"
      - "traefik.http.routers.pocket-id.rule=Host(`pocket-id.home.lan`)"
      - "traefik.http.routers.pocket-id.tls=true"      
      - "traefik.http.services.pocket-id.loadbalancer.server.port=1411"  

Click on Sign in using PocketID

Expected behavior

i would expect that gitea will redirect to the url which was specified in APP_URL

Actual Behavior

The browser will be redirected to http://localhost:1411

Version and Environment

v1.1.0
APP_URL=https://pocket-id.home.lan

Log Output

No response

Originally created by @P1tt187 on GitHub. ### Reproduction steps I configured gitea to use Pocket-id. it uses https://pocket-id.home.lan/.well-known/openid-configuration My Pocketid instance runs behind traefik. ```yaml labels: - "traefik.enable=true" - "traefik.http.routers.pocket-id.entrypoints=websecure" - "traefik.http.routers.pocket-id.rule=Host(`pocket-id.home.lan`)" - "traefik.http.routers.pocket-id.tls=true" - "traefik.http.services.pocket-id.loadbalancer.server.port=1411" ``` Click on Sign in using PocketID ### Expected behavior i would expect that gitea will redirect to the url which was specified in `APP_URL` ### Actual Behavior The browser will be redirected to http://localhost:1411 ### Version and Environment v1.1.0 `APP_URL=https://pocket-id.home.lan` ### Log Output _No response_
OVERLORD added the bug label 2025-10-07 23:57:04 +03:00
Author
Owner

@P1tt187 commented on GitHub:

Hi @Fuckingnameless, I edited the description. Now it contains the labels

@P1tt187 commented on GitHub: Hi @Fuckingnameless, I edited the description. Now it contains the labels
Author
Owner

@stonith404 commented on GitHub:

I'm converting this to a discussion as this doesn't seem related directly to Pocket ID but Traefik. I don't use Traefik so I can't really help you here but maybe someone else can.

@stonith404 commented on GitHub: I'm converting this to a discussion as this doesn't seem related directly to Pocket ID but Traefik. I don't use Traefik so I can't really help you here but maybe someone else can.
Author
Owner

@gilbrotheraway commented on GitHub:

can you share the traefik labels you use on the pocket id container

@gilbrotheraway commented on GitHub: can you share the traefik labels you use on the pocket id container
Author
Owner

@P1tt187 commented on GitHub:

It tryes to perform a request to tis location

curl 'http://localhost:1411/authorize?client_id=xxxx^&redirect_uri=https%3A%2F%2Fxxxxxxx%2Fuser%2Foauth2%2FPocketID%2Fcallback^&response_type=code^&scope=openid+email+profile+picture+openid^&state=xxxxxx' 

as i investigated, this the redirect header from pocket-id points to this location
this worked fine with the versions that had caddy included

@P1tt187 commented on GitHub: It tryes to perform a request to tis location ``` curl 'http://localhost:1411/authorize?client_id=xxxx^&redirect_uri=https%3A%2F%2Fxxxxxxx%2Fuser%2Foauth2%2FPocketID%2Fcallback^&response_type=code^&scope=openid+email+profile+picture+openid^&state=xxxxxx' ``` as i investigated, this the redirect header from pocket-id points to this location this worked fine with the versions that had caddy included
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-1#191