You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To support Azure AD as an IdP, it's necessary to set header Origin. If not, this issue here is encountered.
Error looks like: [error] 10#10: *1 js: OIDC error from IdP when sending authorization code: invalid_request, AADSTS9002327: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests.
Fix is to add proxy_set_header Origin $host; in locations /_token and /_refresh
Could you update the documentation?
Best Regards
The text was updated successfully, but these errors were encountered:
Hello,
To support Azure AD as an IdP, it's necessary to set header
Origin
. If not, this issue here is encountered.Error looks like:
[error] 10#10: *1 js: OIDC error from IdP when sending authorization code: invalid_request, AADSTS9002327: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests.
Fix is to add
proxy_set_header Origin $host;
in locations/_token
and/_refresh
Could you update the documentation?
Best Regards
The text was updated successfully, but these errors were encountered: