{"action":"created","issue":{"url":"https://api.github.com/repos/pingidentity/lua-resty-openidc/issues/19","repository_url":"https://api.github.com/repos/pingidentity/lua-resty-openidc","labels_url":"https://api.github.com/repos/pingidentity/lua-resty-openidc/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/pingidentity/lua-resty-openidc/issues/19/comments","events_url":"https://api.github.com/repos/pingidentity/lua-resty-openidc/issues/19/events","html_url":"https://github.com/pingidentity/lua-resty-openidc/issues/19","id":174295261,"number":19,"title":"If session does not match, redirect omits port","user":{"login":"dholth","id":208018,"avatar_url":"https://avatars.githubusercontent.com/u/208018?v=3","gravatar_id":"","url":"https://api.github.com/users/dholth","html_url":"https://github.com/dholth","followers_url":"https://api.github.com/users/dholth/followers","following_url":"https://api.github.com/users/dholth/following{/other_user}","gists_url":"https://api.github.com/users/dholth/gists{/gist_id}","starred_url":"https://api.github.com/users/dholth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dholth/subscriptions","organizations_url":"https://api.github.com/users/dholth/orgs","repos_url":"https://api.github.com/users/dholth/repos","events_url":"https://api.github.com/users/dholth/events{/privacy}","received_events_url":"https://api.github.com/users/dholth/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-08-31T14:54:52Z","updated_at":"2016-08-31T16:20:57Z","closed_at":null,"body":"I'm using https://localhost:8443/ as a test server. It looks like a redirect on the error path drops the port.\r\n\r\n1. Set lua_code_cache off without setting an explicit session secret. This causes resty.session to choose a new secret for every request, and it will not be able to decode session cookies.\r\n2. Visit protected URL, get redirected to IdP\r\n3. Redirect back to callback URL\r\n4. Redirect to https://localhost/ with no port\r\n"},"comment":{"url":"https://api.github.com/repos/pingidentity/lua-resty-openidc/issues/comments/243818504","html_url":"https://github.com/pingidentity/lua-resty-openidc/issues/19#issuecomment-243818504","issue_url":"https://api.github.com/repos/pingidentity/lua-resty-openidc/issues/19","id":243818504,"user":{"login":"zandbelt","id":2339879,"avatar_url":"https://avatars.githubusercontent.com/u/2339879?v=3","gravatar_id":"","url":"https://api.github.com/users/zandbelt","html_url":"https://github.com/zandbelt","followers_url":"https://api.github.com/users/zandbelt/followers","following_url":"https://api.github.com/users/zandbelt/following{/other_user}","gists_url":"https://api.github.com/users/zandbelt/gists{/gist_id}","starred_url":"https://api.github.com/users/zandbelt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zandbelt/subscriptions","organizations_url":"https://api.github.com/users/zandbelt/orgs","repos_url":"https://api.github.com/users/zandbelt/repos","events_url":"https://api.github.com/users/zandbelt/events{/privacy}","received_events_url":"https://api.github.com/users/zandbelt/received_events","type":"User","site_admin":false},"created_at":"2016-08-31T16:20:57Z","updated_at":"2016-08-31T16:20:57Z","body":"What does your `nginx.conf` look like?\r\n\r\nAs you'll note after opening the session in https://github.com/pingidentity/lua-resty-openidc/blob/master/lib/resty/openidc.lua#L460 the authorization response handler just returns to the caller on a session restore error: https://github.com/pingidentity/lua-resty-openidc/blob/master/lib/resty/openidc.lua#L295, no redirects involved.\r\n\r\nCould it be that the calling configuration somehow redirects after `local res, err = require(\"resty.openidc\").authenticate(opts)` returns with `err` set? "}}
{"actor":{"display_login":"zandbelt"}}