OpenID Connect Login flow mildly broken when initiated from login block on 403 pages

Created on 20 June 2024, 3 months ago

Problem/Motivation

https://www.drupal.org/i/3177199 introduced the login form on /403 pages in farmOS. This works great in general, except that openid_connect module uses `@path.current` as the url to finally redirect back to after successful logins.

https://git.drupalcode.org/project/openid_connect/-/blob/948d38db1eca400...

https://git.drupalcode.org/project/openid_connect/-/blob/948d38db1eca400...

In effect, this means that the only way to login via OpenId Connect and not end up on a 403 page is to manually go to `/user/login?destination=/` (or similar) before logging in.

Logging in otherwise works correctly and it is possible to navigate away from the 403 page once logged in. However, this does represent a pretty ugly login flow which would affect anybody trying to use farmOS with an external OpenId Connect login provider like Keycloak/Google/GitHub/etc.

Steps to reproduce

Install farmOS and configure the openid_connect module to login via an external openid service - e.g. Keycloak

Proposed resolution

I don't have a great solution to recommend here. It's possible that the fix would need to be with the openid_connect module, but I thought we should start with a tracking issue here.

Remaining tasks

N/A

User interface changes

N/A

API changes

N/A

Data model changes

N/A

🐛 Bug report
Status

Closed: works as designed

Version

3.2

Component

Miscellaneous

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024