SSO & external avatars

[Falco]

@mentalstring

So, if I understand correctly, currently Discourse is proxying avatars from the object storage to the client. However, this behavior seems specific to when using SSO external avatars since avatars here in meta are coming directly from the (CDN’ed) object storage. But when using SSO with external URLs, the avatar URLs are in the form

That’s not the case. By default, Discourse will proxy requests for avatars, as you see on your site.

However, last year, we introduced a setting that can be enabled via the ENV DISCOURSE_REDIRECT_AVATAR_REQUESTS=1 to trigger the behavior you see here.