Wekan in iOS Safari : log in

[jayonrails]

Is OIDC enabled in your Wekan instance?

[girish]

@timconsidine Wekan uses a popup window when you click the OIDC login button (strange design choice). So, maybe a window is opening in the background or is blocked by thw browser?

[timconsidine]

@girish ah ! Thank you - will investigate.

[LowTech]

I'm running into an issue here, too. Neither Safari nor Chrome seem to work.

On Safari, I had to disable my ad blocker to get the popup window. However, when I click the "Sign in with Oidc" button and get the popup, I click the "Authorize" button, and it simply says "Login completed." but doesn't log me in.

On Chrome, I get the popup, I log in as normal, and the window disappears, but doesn't log me in.

[girish]

@LowTech On Chrome, sometimes I have to refresh the page after I click Log in, so that it logs me in. Not sure about safari.

[LowTech]

That worked for me on Chrome, too! Sadly not Safari.

[iamthefij]

This should maybe be bundled into the Cloudron defaults, but if you add export OIDC_REDIRECTION_ENABLED=true to your env file (using File Manager) and reboot, Wekan will not use a popup but instead redirect you to the ODIC login page automatically. This works in Safari and the Progressive Web App on iOS.

[thetomester13]

@iamthefij amazing! Good find, thanks for sharing. Would probably be good to have this bundled in for future updates.

[girish]

IIRC, we initially started with OIDC_REDIRECTION_ENABLED=true but that flag is quite buggy. I am just re-testing if the situation has changed.

[girish]

With OIDC_REDIRECTION_ENABLED=true :

• It automatically redirects to the oauth provider's login screen . This is quite confusing. Because you visit, wekan.domain.com and it just immediately redirects with no intimation to my.somedomain.com . Ideally, a user has to click a button to login via the provider and then it should redirect .
• When logging out, it redirects to my.somedomain.com .

Very confusing flow, unfortunately.

[iamthefij]

Yea, I agree. I'd rather see it attached to the button, however confusing is better than broken for me.

[thetomester13]

Agreed with @iamthefij - previously I pretty much gave up on the iOS PWA since I wasn't able to log in at all. IMO, it's probably at least worthy of a mention in the docs for iOS users who want to use the PWA.