OAuth2 login doesn't seem to work

I have Scoold running locally. I wanted to add OAuth2 login (using Azure Active Directory as IdP). Here’s the config that I’m using:

para.env = "production"
para.endpoint = "http://para:8080"
para.access_key = "app:para"
para.secret_key = "{para-key}"

para.password_auth_enabled = false

# minimal setup
para.oa2_app_id = "{my client ID}"
para.oa2_secret = "{my secret}"
para.security.oauth.authz_url = "https://login.microsoftonline.com/{my tenant ID}/oauth2/v2.0/authorize"
para.security.oauth.token_url = "https://login.microsoftonline.com/{my tenant ID}/oauth2/v2.0/token"
para.security.oauth.profile_url = "https://graph.microsoft.com/oidc/userinfo"
para.security.oauth.scope = "openid email profile"

# extra options
para.security.oauth.parameters.id = "sub"
para.security.oauth.parameters.email = "email"
para.security.oauth.parameters.name = "name"

# Sets the string on the login button
para.security.oauth.provider = "Login using AAD"

# Enable/disable access token delegation
para.security.oauth.token_delegation_enabled = false

When I run Scoold, I see this:

As I’d expect, only AAD login is enabled. However, clicking the button has no reaction. The HTML looks like this:

The button points to #, which basically does nothing. What am I doing wrong?

[marcinjahn]

I figured that out - I added para.app_name = "Scoold" to my Scoold config. It is missing in the Docker Compose example. I’ll add it in another PR. Now, the login flow worked without any error.

[albogdano]

Users won’t have to refresh the login page because that bug rarely happens, usually when you have the cached JS file and change configuration. Using the root app app:para for Scoold is not recommended. You should create a separate app app:scoold or similar. Yes, Para creates that JWT. The problem comes from the fact that para-auth is a cookie used by Para itself for a different purpose and Scoold usually works with the scoold-auth cookie.

Btw, would you like me to add the Azure Active Directory setup procedure to README.md? I see that you have instructions for Okta, AAD setup is a bit different.

Sure, go ahead! That would be helpful to others as well.