Skip to content

Conversation

@lovasoa
Copy link
Collaborator

@lovasoa lovasoa commented Jan 8, 2026

Fix OIDC to correctly handle SITE_PREFIX in redirect URLs and path validation, resolving issues when SQLPage is hosted under a subpath.


Open in Cursor Open in Web

This change ensures that when `site_prefix` is configured, the OIDC redirect URI and logout URI include this prefix.
Previously, `site_prefix` was ignored, causing OIDC callbacks to fail when the application was served under a sub-path.

- Added `site_prefix` to `OidcConfig`.
- Updated `make_oidc_client` to prepend `site_prefix` to the redirect URI.
- Updated `handle_request` to match paths with `site_prefix` included.
- Updated `validate_redirect_url` to respect the prefix when verifying redirect targets.
- Added a regression test `test_oidc_with_site_prefix`.
@cursor
Copy link

cursor bot commented Jan 8, 2026

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
Learn more about Cursor Agents

This commit updates several dependencies to their latest versions and removes unused crates to streamline the project.

Co-authored-by: contact <[email protected]>
@lovasoa lovasoa force-pushed the cursor/oidc-site-prefix-handling-ae1f branch from 8b0b397 to 3aa95a4 Compare January 8, 2026 14:01
@lovasoa lovasoa force-pushed the cursor/oidc-site-prefix-handling-ae1f branch from 4a6c1d6 to 3de7584 Compare January 8, 2026 14:53
@lovasoa lovasoa linked an issue Jan 8, 2026 that may be closed by this pull request
@lovasoa lovasoa marked this pull request as ready for review January 8, 2026 15:46
@lovasoa lovasoa merged commit 8d106fb into main Jan 8, 2026
10 checks passed
@lovasoa lovasoa deleted the cursor/oidc-site-prefix-handling-ae1f branch January 8, 2026 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support path-based reverse proxy (site_prefix) for SQLPage OIDC flows

3 participants