HTTPS Redirection Issue with :80 Port Included After OIDC Authentication

My YunoHost server

Hardware: VPS bought online
YunoHost version: 11.2.9.1
I have access to my server : Through SSH
Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no
If yes, please explain:

Hello everyone,

I am encountering a challenging issue on my XWiki instance (version Jetty HSQLDB 15.10.1), hosted on a YunoHost server.
After authenticating via OpenID Connect (OIDC), I am redirected to an HTTPS URL that incorrectly includes the port :80 (for example, https://mysite.example.com:80/xwiki/bin/admin/?srid=Flg6M7m5).

This incorrect port inclusion leads to a “secure connection failure” in the browser, as :80 is not the appropriate port for HTTPS connections.

Context:

  • The XWiki instance, specifically version Jetty HSQLDB 15.10.1, is configured for OIDC authentication on a YunoHost server.
  • This issue arises immediately after the authentication phase, during redirection back to the XWiki interface.
  • The base URL (xwiki.home) within XWiki’s xwiki.cfg is set to https://mysite.example.com/xwiki, aiming for HTTPS without specifying a port.

Noteworthy Observation:

Manually removing :80 from the URL in the browser allows me to access the XWiki interface correctly, and I am found to be logged in successfully.

Attempted Solutions:

The xwiki.home setting in xwiki.cfg is confirmed to be https://mysite.example.com:443/xwiki/, which seems correct, but the issue with the incorrect port remains.

I implemented a specific Nginx configuration aiming to redirect or correct these URLs, as follows:

    server {
      listen 80;
      server_name mysite.example.com;
      return 301 https://$host$request_uri;
    }

Unfortunately, this has not resolved the issue.

Seeking Guidance:
I am reaching out for any advice, insights, or solutions that the community might offer. If anyone has experienced a similar issue, or has suggestions on potential fixes, your input would be greatly appreciated.

Thank you for your time and assistance.

Hello,

First question, why do you want to install and setup OIDC as XWiki app are already fully configured to use the LDAP of yunohost and the SSO authentication. And on other side Yunohost for now don’t support OIDC.

Maybe if you explain more the reason why you do this setup it might be more easy to understand what is happening and what you try to setup.

Best regards

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.