OIDC doesn't work if the IdP is behind godoxy #46

Closed
opened 2025-12-29 14:23:12 +01:00 by adam · 3 comments
Owner

Originally created by @stancubed on GitHub (Mar 19, 2025).

My OIDC provider is Pocket ID and is behind godoxy at id.domain.com. When I configure OIDC in godoxy, one of the fields is GODOXY_OIDC_ISSUER_URL and the value is https://id.domain.com/authorize.
When godoxy boots, it can't seem to reconcile the GODOXY_OIDC_ISSUER_URL --

03-18 21:04 INF GoDoxy version 0.9.8
03-18 21:04 INF loaded route providers
                  • docker@local 34 routes
03-18 21:04 WRN access log open error: open /app/logs/entrypoint.log: no such file or directory
03-18 21:04 INF next renewal in 56 days, 23 hours and 55 minutes
03-18 21:04 INF certificate expire on 2025-06-15 01:59:45
03-18 21:04 ERR docker@local > pihole: listen udp 192.168.221.28:0: bind: cannot assign requested address
03-18 21:04 INF server started addr=:80 module=server name=proxy
03-18 21:04 INF server started addr=:443 module=server name=proxy
03-18 21:04 INF icon list cache loaded (9747 icons, 1314 display names), last updated at 2025-03-18 16:31:49
03-18 21:04 INF icon cache loaded (42 icons)
03-18 21:04 FTL failed to initialize authentication error="failed to initialize OIDC provider: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": invalid character '<' looking for beginning of value"

Is there a way to start serving the proxy hosts first?

Originally created by @stancubed on GitHub (Mar 19, 2025). My OIDC provider is Pocket ID and is behind godoxy at id.domain.com. When I configure OIDC in godoxy, one of the fields is `GODOXY_OIDC_ISSUER_URL` and the value is `https://id.domain.com/authorize`. When godoxy boots, it can't seem to reconcile the `GODOXY_OIDC_ISSUER_URL` -- ``` 03-18 21:04 INF GoDoxy version 0.9.8 03-18 21:04 INF loaded route providers • docker@local 34 routes 03-18 21:04 WRN access log open error: open /app/logs/entrypoint.log: no such file or directory 03-18 21:04 INF next renewal in 56 days, 23 hours and 55 minutes 03-18 21:04 INF certificate expire on 2025-06-15 01:59:45 03-18 21:04 ERR docker@local > pihole: listen udp 192.168.221.28:0: bind: cannot assign requested address 03-18 21:04 INF server started addr=:80 module=server name=proxy 03-18 21:04 INF server started addr=:443 module=server name=proxy 03-18 21:04 INF icon list cache loaded (9747 icons, 1314 display names), last updated at 2025-03-18 16:31:49 03-18 21:04 INF icon cache loaded (42 icons) 03-18 21:04 FTL failed to initialize authentication error="failed to initialize OIDC provider: oidc: failed to decode provider discovery object: expected Content-Type = application/json, got \"text/html\": invalid character '<' looking for beginning of value" ``` Is there a way to start serving the proxy hosts first?
adam closed this issue 2025-12-29 14:23:12 +01:00
Author
Owner

@yusing commented on GitHub (Mar 19, 2025):

It should be https://id.domain.com

@yusing commented on GitHub (Mar 19, 2025): It should be https://id.domain.com
Author
Owner

@stancubed commented on GitHub (Mar 19, 2025):

Ah okay. The wiki page lists the GODOXY_OIDC_ISSUER_URL as using the Authorization URL, which ends in /authorize so I was working from that. The good news is that I removed it and it works now! Thanks for the quick note -- I'm not sure how to do a PR for wiki content, but can I suggest you edit the documentation to reflect the difference? It's in the OIDC section (https://github.com/yusing/godoxy/wiki#oidc) under "Usage Example (Pocket ID)".

@stancubed commented on GitHub (Mar 19, 2025): Ah okay. The wiki page lists the `GODOXY_OIDC_ISSUER_URL` as using the Authorization URL, which ends in `/authorize` so I was working from that. The good news is that I removed it and it works now! Thanks for the quick note -- I'm not sure how to do a PR for wiki content, but can I suggest you edit the documentation to reflect the difference? It's in the OIDC section (https://github.com/yusing/godoxy/wiki#oidc) under "Usage Example (Pocket ID)".
Author
Owner

@yusing commented on GitHub (Mar 19, 2025):

Sorry for the wrong info on Wiki, have just fixed it. Thanks.

@yusing commented on GitHub (Mar 19, 2025): Sorry for the wrong info on Wiki, have just fixed it. Thanks.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/godoxy-yusing#46