-
/api/auth/loginis public - Middleware applied to apps
- Cookie domain correct
- Redirect URI matches OIDC configuration
- HTTPS enabled
/api/auth/loginbehind middleware- Cookie not set
- Domain mismatch
- Check HTTPS
- Verify domain
- Inspect browser cookies
Ensure exact match:
https://auth.example.com/api/auth/login
- Check
authz.rules - Verify user email
- Middleware not attached
- Service name/port mismatch
- Use Redis for multiple instances
session:
session_ttl: 24h