Dries Peeters 1529a2d498 fix(oidc): resolve redirect loop with Authelia and improve callback diagnostics ...

- Add issuer fallback from OIDC_ISSUER when userinfo lacks iss (fixes Authelia)
- Fallback to unverified id_token decode for iss when ID token parsing failed
- Wrap authorize_access_token() in dedicated try/except; log token_exchange_failed
  and suggest session cookie/proxy checks when state or PKCE validation fails
- Log reason=... before every redirect to login in callback for easier debugging
- Add 'Redirect loop / callback returns to login' troubleshooting to OIDC_SETUP.md

Fixes #486

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-02-02 20:30:26 +01:00

..

DESKTOP_BUILD_WINDOWS_TROUBLESHOOTING.md

…

DOCKER_COMPOSE_SETUP.md

…

DOCKER_PUBLIC_SETUP.md

…

DOCKER_STARTUP_TROUBLESHOOTING.md

…

EMAIL_CONFIGURATION.md

…

OIDC_SETUP.md

fix(oidc): resolve redirect loop with Authelia and improve callback diagnostics

2026-02-02 20:30:26 +01:00

PEPPOL_EINVOICING.md

Add setting to make all invoices PEPPOL compliant

2026-01-21 15:13:26 +01:00