The oCIS web fetches the OIDC discovery document from the Hub issuer in the browser — connect-src only allowed same-origin + blob, so the fetch was blocked and the web fell back to its own login. With the CSP fix + the external issuer flip, the full SSO chain works: Hub login -> authorize -> consent SPA -> code -> autoprovisioned personal drive. |
||
|---|---|---|
| .. | ||
| grafana/provisioning/datasources | ||
| matrix | ||
| mock-rtmp | ||
| occupymedia | ||
| otel | ||
| peertube | ||
| peertube-workers | ||
| prometheus | ||
| docker-compose.yml | ||
| media-worker.Dockerfile | ||