OIDC Redirect not working

[anas-zurkiyeh-sp]

Description

While trying to configure OICD with Azure AD in the cloud, I encountered an issue where the redirect URL is always invalid. Nebraska does not seem to be updating the value for the callback URL from AD and I'm always getting http://localhost:8000/login?login_redirect_url=<NEBRASKA_URL> where <NEBRASKA_URL> is nebraska's custom domain. I was able to replicate this behavior locally by passing the -oidc-valid-redirect-urls flag and it seems to not take in any value as I'm always redirected to the URL http://localhost:8000/login?login_redirect_url=http://localhost:8000/

Impact

Unable to configure OIDC with Azure ID as an identity provider.

Environment and steps to reproduce

I will describe how to replicate locally:

./nebraska -auth-mode oidc -http-static-dir ./static/ \
-http-log -enable-syncer \
-oidc-client-id <CLIENT_ID> \
-oidc-issuer-url https:/
/login.microsoftonline.com/<TENANT_ID>/v2.0 \
-oidc-client-secret <CLIENT_SECRET> \
-oidc-admin-roles nebraska_admin \
-oidc-viewer-roles nebraska_member \
-oidc-valid-redirect-urls <NEBRASKA_DOMAIN>

I noticed that regardless of the value of <Nebraska_DOMAIN>, it does not seem to be change the behavior.

Trying to navigate to <Nebraska_DOMAIN> always results in http://localhost:8000/login?login_redirect_url=<NEBRASAKA_DOMAIN>/

Expected behavior

Expected to redirect to specified URL passed in by the flag -oidc-valid-redirect-urls

[anas-zurkiyeh-sp]

Passing in -nebraska-url fixed issue for me.