oidc auth requests http instead of https
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 135
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
Hello Folks,
Thank you for this great extension to dash.
I have just deployed an app to Azure App Service and it generally works well. The last thing that I have added is to integrated (Azure Entra/AD) as authentication method. It seems to work in general, but for some reason even when I type in https://{appname}.{region}.azurewebsites.net the auth module requests a redirect_uri with http instead of https (see screenshot below). The AD administration team of course wants me to use https and I myself want that as well.
Every app deployed on Azure App Service has a certificate/ssl/https on board and should be usable. At least that's my understanding. Does someone have a hint what I can do about this?
I currently start the server as following:
if __name__ == '__main__':
app.run_server(host='0.0.0.0', port=int(os.environ.get('PORT', 8050)))
Any help is much appreciated.
Have a good day
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the OIDC redirect-URI construction used by dash-auth and compare it with the supplied app.run_server entry point under Azure App Service. Reproduce the reported HTTP redirect while accessing the app via HTTPS, then verify that the generated URI preserves HTTPS and that the authentication flow still works.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, python
- Domain
- authentication, cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100