Closed nathanpreen closed 1 month ago
@nathanpreen, the redirect_url needs to be set in the OAUTH2 provider; in your case, it is OKTA. Please refer https://www.pgadmin.org/docs/pgadmin4/8.9/oauth2.html.
Hey @khushboovashi.
So we have set it in Okta to be https://example.com/oauth2/authorize
, however we see that in the url every time it is set to http://example.com:443/oauth2/authorize
. Is the redirect_uri solely handled by the OAUTH2 provider?
My understanding was that PGAdmin would send it up also with the auth request and then it should match what is set in Okta
Hi @nathanpreen, pgAdmin doesn't send redirect_uri. It is being handled at the OAUTH2 provider end. Once you can check your proxy settings too.
No response from the author, hence closing the issue.
Please note that security bugs or issues should be reported to security@pgadmin.org.
Describe the bug
Currently using Okta as an Oauth2 proxy for PGAdmin as a Web Server running inside of our EKS cluster. Traffic flow for our cluster is: Client -> ALB -> HAProxy -> Service.
Upon hitting the login button on it takes me to Okta to login as normal, however it appears the redirect_uri is incorrect and I cannot find a way to override it.
Note: I have replaced all our domains with example.com. Looking at the url, I can see it is setting it to be![image](https://github.com/pgadmin-org/pgadmin4/assets/99659771/0ac6a94f-0f38-47db-a7e8-d56923a05d0c)
http://example.com:443/oauth2/authorize
. However I require this to behttps://example.com/oauth2/authorize
. That's what we currently have set up in our Okta app to use. If I adjust it to be what is being sent by PGAdmin we get the following error.This is the error that we currently see:![image](https://github.com/pgadmin-org/pgadmin4/assets/99659771/9b8c9b17-b320-4451-a228-1a6c7772da83)
I have tried adjusting various options however I can't seem to get the right one.
Config:
Additional context
Add any other context about the problem here.