search

Widen / cloudfront-auth

An AWS CloudFront Lambda@Edge function to authenticate requests using Google Apps, Microsoft, Auth0, OKTA, and GitHub login
ISC License
626 stars 149 forks source link

DISCOVERY_DOCUMENT OKTA Auth fails #57

Open sri-pavan opened 4 years ago

sri-pavan commented 4 years ago

The DISCOVERY_DOCUMENT does not include the api login url for okta its juts creates a random /callback url which there is no documentation on configuring

payton commented 4 years ago

Can you expand more on what your issue is?

What is the "it" that is creating a random /callback url? Our CloudFront URL is used for the /callback url.

sri-pavan commented 4 years ago

It implies the build.sh

the Discovery Document for OKTA should be a separate URL which we get from OKTA, when we replaced the disc_doc url with the one form OKTA our app started working before it was giving 400 errors as the discovery document didnt exist

qwwqwwq commented 2 years ago

I think whats going on here, after encountering this myself, is that during the build.js workflow I think It's confusing what "Base URL" means. It should be the okta base url (https://<company>.okta.com) not the application base url (<xxx>.cloudfront.net), if you provide the cloudfront url the lambda function will timeout and you'll get some weird behavior like a 503 or something.