jgraph / docker-drawio

Dockerized draw.io based on whichever is the most secure image at the time.
GNU General Public License v3.0
1.48k stars 359 forks source link

OneDrive Redirect URI not working behind reverse proxy #140

Closed loligans closed 7 months ago

loligans commented 8 months ago

I am able to start the service and I have configured the necessary redirect URIs, however, when the token gets sent back, the reverse proxy automatically removes the ssl certificate and forwards the request to the container using http

SEVERE [http-nio-8080-exec-9] com.mxgraph.online.AbsAuth.contactOAuthServer AUTH-SERVLET: [https://login.microsoftonline.com/common/oauth2/v2.0/token] ERROR: Server returned HTTP response code: 400 for URL: https://login.microsoftonline.com/common/oauth2/v2.0/token -> {"error":"invalid_client","error_description":"AADSTS50011: The redirect URI 'http://draw.mydomain.com/microsoft' specified in the request does not match the redirect URIs configured for the application '4897b7e3-3215-4264-aa2b-6ab9f81bdf60'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal. Navigate to https://aka.ms/redirectUriMismatchError to learn more about how to fix this. Trace ID: 78ecf6d7-5899-4091-8e44-5537cf8a8000 Correlation ID: 4e497259-6995-48e5-b451-ac2fc270fdb9 Timestamp: 2023-12-19 18:32:55Z","error_codes":[50011],"timestamp":"2023-12-19 18:32:55Z","trace_id":"78ecf6d7-5899-4091-8e44-5537cf8a8000","correlation_id":"4e497259-6995-48e5-b451-ac2fc270fdb9","error_uri":"https://login.microsoftonline.com/error?code=50011"}

Is there a way to reconfigure the redirect URI to allow this? According to Microsoft http redirect URI's are not allowed even though the redirect URI is ssl secured during transit