Zulip OIDC authentication bug.

[janhalen]

@nicolas-semaphor
You can describe the bug here.

[janhalen]

After some digging.. I found this description..
https://chat.zulip.org/#narrow/stream/31-production-help/topic/OIDC.20error.20when.20login/near/1549038

Does that have any impact on the bug?

[janhalen]

@nicolas-semaphor: Ready for resolution when commits to #18 is done...

[nicolas-semaphor]

As far as I can tell the issues relates to the Zulip smokescreen proxy and requests to the SOCIAL_AUTH servers getting caught up there. The issue was resolved by adding
SOCIAL_AUTH_PROXIES = {"http": None, "https": None}
to the settings.py file in /etc/zulip/settings.py.

When running docker-zulip, you can add the following to the docker-compose.yml to automatically add this line to settings.py in every build (as I have also done in the zulip-deployment docker-compose.yml in branch #18 ):
ZULIP_CUSTOM_SETTINGS: SOCIAL_AUTH_PROXIES={"http":None,"https":None}

If one is running multiple social auth setups, you can allegedly also use specific auth-proxy settings, like:
SOCIAL_AUTH_OIDC_PROXIES etc., but I did not test this.