For the live migration we are reading a claim from the openid connect userinfo to set the owncloud-selector cookie that the proxy uses to route requests to ocis or oc10.
The response we need to react to is the redirect from the IdP which looks like
https://cloud.ocis.test/apps/openidconnect/redirect?code=fooberbazrandombytes&scope=openid%20profile%20email&session_state=some.jwt.token%3D&state=something
There is no Authorization Bearer header set, yet so we cannot set the cookie in the proxy. For now, the best place to put the code is the openidconnect app.
For the live migration we are reading a claim from the openid connect userinfo to set the
owncloud-selector
cookie that the proxy uses to route requests to ocis or oc10.The response we need to react to is the redirect from the IdP which looks like
https://cloud.ocis.test/apps/openidconnect/redirect?code=fooberbazrandombytes&scope=openid%20profile%20email&session_state=some.jwt.token%3D&state=something
There is no Authorization Bearer header set, yet so we cannot set the cookie in the proxy. For now, the best place to put the code is the openidconnect app.