I have a similar question as in Format for 'openid connect authorize parameters' field. Our Auth0 setup requires to add connection=123 to the authorize endpoint. I tried several combinations of openid connect authorize parameters without success. So either please give me a working example or fix the bug - I have the impression that the given parameters are not routed through to the authorize request at all.

I switched to the Oauth2 Basic plugin. Problem solved.

[תמונה] Fabian Fischer: Our Auth0 setup requires to add connection=123 Looking at the code it looks like it needs to be in request params. lib/omniauth_open_id_connect.rb a16d5edd3 def authorize_params super.tap do |params| options[:passthrough_authorize_options].each do |k| params[k] = request.params[k.to_s] unless [nil, ""].include?(request.params[k.to_s]) end params[:claims] = options[:claims] if options[:claims].present? params[:scope] = options[:scope] session["omniauth.nonce"] = params[:nonce] = SecureRandom.hex(32) options[:passthrough_token_options].each do |k| session["omniauth.param.#{k}"] = request.params[k.to_s] unless [nil, ""].include?( request.params[k.to_s], ) end end end Try using chrome dev tools, track all HTTP requests, are you certain this allow listed param is in the request params? This is just used to allow list stuff, not to hardcode a value. If you need to hardcode a value a new feature would need to be built.

Happened to me on one occasion, adding the parameter directly in the authorize_url seems to do the trick :thinking:

And how are you supposed to do this? The plugin only takes the discovery document: plugins: openid_connect_enabled: default: false openid_connect_discovery_document: default: "" openid_connect_client_id: default: "" openid_connect_client_secret: default: "" openid_connect_rp_initiated_logout: default: false openid_connect_rp_initiated_logout_redirect: default: "" openid_connect_allow_association_change: default: false openid_connect_overrides_email: default: false openid_connect_authorize_scope: default: "openid" openid_connect_verbose_logging: default: false openid_connect_token_scope: default: "" openid_connect_error_redirects: default: "" type: list list_type: secret openid_connect_authorize_parameters: default: "" type: list list_type: compact openid_connect_claims: default: "" textarea: true openid_connect_match_by_email: default: true

לא ניתן להוסיף פרמטרים נוספים לנקודת הקצה authorize

תמיכה SSO

nodomain 26 באפריל,‏ 2023,‏ 3:48pm 3

I don’t get it. The parameters are not added at all…

נושא		תגובות	צפיות
Format for 'openid connect authorize parameters' field Product Support openid-connect	0	480	30 ביולי,‏ 2022
Is it possible to send custom params with the request to /authorize? SSO oauth2	1	415	22 בדצמבר,‏ 2022
OpenId Plugin Callback setting SSO openid-connect	1	287	17 ביוני,‏ 2024
Discourse OpenID Connect (OIDC) Plugin official , openid-connect , auth-plugins , included-in-core	46	52675	27 במאי,‏ 2026
Support for specifying a custom scope SSO oauth2	3	3764	20 בפברואר,‏ 2019

לא ניתן להוסיף פרמטרים נוספים לנקודת הקצה authorize

נושאים קשורים