# Openid-connect plugin can't fetch configuration

**URL:** https://meta.discourse.org/t/openid-connect-plugin-cant-fetch-configuration/253728
**Category:** SSO
**Created:** [February 1, 2023, 6:16pm UTC](https://meta.discourse.org/t/openid-connect-plugin-cant-fetch-configuration/253728 "2023-02-01T18:16:11Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![RGJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rgj/32/523185_2.png) [@RGJ](https://meta.discourse.org/u/RGJ)
#### Post date: [February 1, 2023, 6:28pm UTC](https://meta.discourse.org/t/openid-connect-plugin-cant-fetch-configuration/253728/2 "2023-02-01T18:28:46Z")

</div>

There is a [security patch](https://github.com/discourse/discourse/blame/64171730827c58df26a7ad75f0e58f17c2add118/lib/final_destination/ssrf_detector.rb) that disallows reaching out to addresses in the private ranges (10.0.0.0/8 and so on) to prevent internal network explorations.

You need to add the hostname to Admin - Settings - Security - `allowed internal hosts` to bypass the check.  
It would have been nice if the plugin did that for you.

---

_[View the full topic](https://meta.discourse.org/t/openid-connect-plugin-cant-fetch-configuration/253728)._