tududi/docs
Chris ca77222eae
fix: resolve OIDC session loss and migration failures (#1023)
* fix: resolve OIDC session loss and migration failures

This commit fixes three critical issues affecting OIDC/SSO authentication:

1. Session Not Saved Before Redirect
   - Added explicit req.session.save() callback in OIDC callback handler
   - Ensures session is persisted before redirecting to /today
   - Prevents 401 errors after successful SSO authentication

2. Migration Resilience
   - Added DROP TABLE IF EXISTS users_new in migration
   - Prevents "table already exists" errors from failed migrations
   - Created cleanup script for orphaned migration tables

3. Trust Proxy Documentation
   - Documented TUDUDI_TRUST_PROXY requirement for reverse proxy deployments
   - Added troubleshooting guide for session loss issues
   - Updated .env.example with OIDC configuration examples

Fixes session loss when deployed behind reverse proxies (nginx, Traefik, etc.)

Changes:
- backend/modules/oidc/controller.js: Add session.save() before redirect
- backend/migrations/20260420000004-make-password-optional.js: Add DROP TABLE IF EXISTS
- backend/scripts/cleanup-failed-migration.js: New cleanup utility
- backend/.env.example: Add OIDC and trust proxy examples
- docs/10-oidc-sso.md: Add trust proxy configuration and troubleshooting
- docs/feature-plans/00-oidc-sso.md: Document required environment variables

* fix: prettier formatting in cleanup script
2026-04-14 07:53:55 +03:00
..
feature-plans fix: resolve OIDC session loss and migration failures (#1023) 2026-04-14 07:53:55 +03:00
00-tasks-behavior.md Add LLM docs 2026-03-15 09:01:38 +02:00
01-recurring-tasks-behavior.md Add LLM docs 2026-03-15 09:01:38 +02:00
02-today-page-sections.md Add LLM docs 2026-03-15 09:01:38 +02:00
03-upcoming-view.md Add LLM docs 2026-03-15 09:01:38 +02:00
04-inbox-page.md Add LLM docs 2026-03-15 09:01:38 +02:00
05-notes-system.md Add LLM docs 2026-03-15 09:01:38 +02:00
06-projects.md Add LLM docs 2026-03-15 09:01:38 +02:00
07-areas.md Add LLM docs 2026-03-15 09:01:38 +02:00
08-user-management.md Add LLM docs 2026-03-15 09:01:38 +02:00
08-views-system.md Add LLM docs 2026-03-15 09:01:38 +02:00
09-tags-system.md docs: clarify tag validation rules and Inbox hashtag syntax (#964) 2026-03-26 17:46:43 +02:00
10-oidc-sso.md fix: resolve OIDC session loss and migration failures (#1023) 2026-04-14 07:53:55 +03:00
architecture.md Add LLM docs 2026-03-15 09:01:38 +02:00
backend-patterns.md Add comprehensive LLM development documentation (#939) 2026-03-14 02:54:59 +02:00
backups.md Add LLM docs 2026-03-15 09:01:38 +02:00
code-conventions.md Add comprehensive LLM development documentation (#939) 2026-03-14 02:54:59 +02:00
common-tasks.md Add comprehensive LLM development documentation (#939) 2026-03-14 02:54:59 +02:00
database.md Add db layout 2026-03-15 09:07:21 +02:00
development-workflow.md Add comprehensive LLM development documentation (#939) 2026-03-14 02:54:59 +02:00
directory-structure.md Add comprehensive LLM development documentation (#939) 2026-03-14 02:54:59 +02:00
MEMORY.md Fix: Bi-weekly recurring task scheduling for multi-day patterns (#1005) 2026-04-12 08:52:13 +03:00
testing.md Add comprehensive LLM development documentation (#939) 2026-03-14 02:54:59 +02:00