ImmichI
Immich4mo ago
ppenguin

OAuth login hangs *after* auth succeeds

I'm a new Immich user and setup (in a local nomad cluster) went smooth. Also setting up OAuth with Zitadel and behind WAF Bunkerweb (with external https domain) worked well. However, suddenly, login via the external domain with OAuth stopped working:
  1. log out of Zitadel (for clean SSO test) -> OK
  2. go to immich.mydomain.net -> OK
  3. choose user in Zitadel SSO (I have autoLaunch=1) -> OK
  4. Observe Immich Login Logo and button "Login with OAuth" with a permanent spinner -> hangs (with redirected URL https://immich.****.***/auth/login?continue=%2Fphotos
The proxy and Immich logs have no errors, they just show the last request made.
I verified the redirect URLs in Zitadel (in comparison with the Immich docs), and they are correct and anyway they weren't changed since the working configuration.

The login has in fact been successful: if I point the browser at ..../api/users/me I get a JSON with my logged in user's data.

At random I had a few successful logins too, but it's completely unclear what's happening. Any ideas?
Was this page helpful?