Alexander Leidinger

No, I'm still running with the explicit list of addresses. The behavior of FreeBSD here is a valid way of operation, and other software packages handle this, so to me...

Yes.

> is your issue solved with this solution @netchild dns: bind_hosts: This is not a solution, it is a workaround.

I tried again with 0.107.45 and can't reproduce the behavior anymore.

> also, please note lua-resty-openidc uses lua-resty-session 3.x, be careful to read the matching docs. I don't know whether configuration has changed in the meantime. I've seen a closed issue...

> You will still need a cookie which holds the session-id. You can set the Same-site value for that via configuration (see the docs of lua-resty-session). The same-site value of...

I tried with "set $session_cookie_samesite Lax;" The first request to protected.site.tld/ does a Set-Cookie session=...;SameSite=Lax. Second request goes to keycloak with auth?client_id=... and does a set-cookie for some keycloak stuff...

Best of both worlds: make it configurable. If the admin decides to accept an auto-redirect,do the redirect. If the switch is on "You are laready logged in - message", provide...

Thanks for the quick reply. For the picture itself that's great (and I've chosen to make it depend upon the possibility to rate a picture). What about the album map?...