Files
Dries Peeters 1529a2d498 fix(oidc): resolve redirect loop with Authelia and improve callback diagnostics
- Add issuer fallback from OIDC_ISSUER when userinfo lacks iss (fixes Authelia)
- Fallback to unverified id_token decode for iss when ID token parsing failed
- Wrap authorize_access_token() in dedicated try/except; log token_exchange_failed
  and suggest session cookie/proxy checks when state or PKCE validation fails
- Log reason=... before every redirect to login in callback for easier debugging
- Add 'Redirect loop / callback returns to login' troubleshooting to OIDC_SETUP.md

Fixes #486

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-02 20:30:26 +01:00
..

Administrator Documentation

Complete guides for TimeTracker administrators.

Configuration

Deployment

Security

Monitoring

🔧 Common Tasks

  1. Initial Setup: Start with Docker Compose Setup
  2. Configure Email: See Email Configuration
  3. Set Up OIDC/SSO: Follow OIDC Setup
  4. Monitor System: Check monitoring/ documentation