0

I've an application in the AWS Fargate and everything is working fine. For Authentication I am using the Application Loadbalancer OIDC, which is also working as expected. For user convinence I want wo add an unprotected static login page. Therefore I assumed, that the rules for the listener of the ALB would be working. The login page will be nested under

/page/login.xhtml

Therefore I've add a new rule for the listern on Port 443

The rules

When I call the page in the browser, it promts the OIDC login process. And only if i cancel the process, it forwards me to the login page. It seems like my rules are not evaluated/applied. In spring the page is unprotected. That is not the problem. I can verify that on localhost.

glethien
  • 2,440
  • 2
  • 26
  • 36
  • perhaps , you should put the exact path in the rule ? or is /page* paths used entirely as "unprotected" usage ? – Darren Mar 29 '23 at 14:47

0 Answers0