mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-09 12:17:13 +00:00
The 401 jump to /oauth2/start lost the original URI, so oauth2-proxy sent every login back to '/'. A first Nextcloud -> OpenProject connect dropped its /oauth/authorize request on the way. The named location @oauth2_start hands $request_uri to oauth2-proxy as X-Auth-Request-Redirect, left empty for non-GET/HEAD requests and for URIs that would push Keycloak's state past its limit. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>