bug: redirect_uri` did not match any of the client's registered `redirect_uris when using Cloudflare Tunnel

[clho40]

Describe the bug

The background is, I have a VPS, installed Coolify on it, and used Coolify's template to deploy a Logto application. My custom domain is parked on Cloudflare, and I use Cloudflare Tunnel to point the DNS to my VPS. and I have used Cloudflare's SSL/TLS redirect in order to redirect all the traffic from HTTP to HTTPS.

So the problem is, when I configure the ADMIN_ENDPOINT as http://logto-admin.mydomain.com, Cloudflare will automatically redirect the traffic to https://logto-admin.mydomain.com and when I click the Create Account button I get the following error

{
    "code": "oidc.invalid_redirect_uri",
    "message": "`redirect_uri` did not match any of the client's registered `redirect_uris`.",
    "error": "invalid_redirect_uri",
    "error_description": "redirect_uri did not match any of the client's registered redirect_uris",
    "state": "JKtuiY1FXwScYAPeMEGwBCFX80oyLtMx3C2oS9E-9ohfbboh9qorZCsSDzfkaGBb3bV4lAZIWUqmIecTtKdjHg",
    "iss": "http://logto-admin.mydomain.com/oidc"
}

It seems like Logto does not recognize the redirected URL? How do I solve this problem?

Expected behavior

How to reproduce?

Context

• [ ] Logto Cloud
• [ ] Self-hosted, Logto version =
  • [-] Container (Docker image)
  • [ ] Raw Node.js

Screenshots

[xiaoyijun]

Hi @clho40 , set ADMIN_ENDPOINT to the URL you finally visited (https://logto-admin.mydomain.com).

And check the error content from the URL where you see the error json page:

{
    "code": "oidc.invalid_redirect_uri",
    "message": "`redirect_uri` did not match any of the client's registered `redirect_uris`.",
    "error": "invalid_redirect_uri",
    "error_description": "redirect_uri did not match any of the client's registered redirect_uris",
    "state": "JKtuiY1FXwScYAPeMEGwBCFX80oyLtMx3C2oS9E-9ohfbboh9qorZCsSDzfkaGBb3bV4lAZIWUqmIecTtKdjHg",
    "iss": "http://logto-admin.mydomain.com/oidc"
}

The URL will be like:

http://localhost:3001/oidc/auth?client_id=???&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Facallback&code_challenge=....

from the URL, you will see the callback uri actually used, and add the URI to the application's redirect uri field:

[clho40]

Hello,

I can't set the ADMIN_ENDPOINT to https - I get the error logto-admin.mydomain.com redirected you too many times. because Cloudflare redirects the traffic.

I get this even before I can login to the portal

[a0zzy]

+1 Same exact issue

[a0zzy]

I was able to get around this by changing "https" to "http" for a quick workaround and it allowed me to create an account and login, but I was not able to get to the dashboard because I get this error: