fix(comfyui): keep the login path on an ungated ingress #83

Merged
rock merged 1 commits from feat/comfyui-sso into main 2026-10-27 21:27:13 +00:00
Owner

Gating /oauth2 loops the browser. Separate ingress for the login path, app ingress stays gated.

Gating /oauth2 loops the browser. Separate ingress for the login path, app ingress stays gated.
rock added 1 commit 2026-10-27 21:26:52 +00:00
Gating /oauth2 with the app redirects /oauth2/start to itself and the browser
loops. ingress-nginx applies an ingress's annotations to the locations that
ingress defines, so the login path belongs on its own object without auth-url.

This split failed once before, and the split was not the reason: the app ingress
carried a configuration-snippet that the controller rejects, which dropped that
whole object and left only the login path rendered.
rock added 1 commit 2026-10-27 21:26:53 +00:00
Gating /oauth2 with the app redirects /oauth2/start to itself and the browser
loops. ingress-nginx applies an ingress's annotations to the locations that
ingress defines, so the login path belongs on its own object without auth-url.

This split failed once before, and the split was not the reason: the app ingress
carried a configuration-snippet that the controller rejects, which dropped that
whole object and left only the login path rendered.
rock merged commit 2485b5f165 into main 2026-10-27 21:27:13 +00:00
Sign in to join this conversation.