nginx-openid-connect icon indicating copy to clipboard operation
nginx-openid-connect copied to clipboard

Published 20 hours ago • verified publisher icon nginxinc

update documentation - Azure AD IdP

Open nergalex opened this issue 2 years ago • 2 comments

Hello,

To support Azure AD as an IdP, it's necessary to set header Origin. If not, this issue here is encountered. Error looks like: [error] 10#10: *1 js: OIDC error from IdP when sending authorization code: invalid_request, AADSTS9002327: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests.

Fix is to add proxy_set_header Origin $host; in locations /_token and /_refresh

Could you update the documentation?

Best Regards

nergalex avatar Mar 01 '23 15:03 nergalex