GitLab OAuth does not work

[sedrubal]

Description

I activated GitLab OAuth with a custom GitLab instance as described in the docs here and here. The login with all the redirects seems to work. However, at the end, I'm not authenticated and the "Sign in with GitLab" button appears again.

Steps to reproduce

1. Create a Application in GitLab.
2. Configure GitLab Auth Provider (see config below).
3. Open Hedgedoc and go to Sign In > Sign in via GitLab
4. Authenticate in GitLab and follow the redirect back to the hedgedoc app

Expected behaviour

After doing the OAuth2 dance, I should be authenticated in hedgedoc.

Logs

2024-01-23T10:40:05.784Z info:  All migrations performed successfully
2024-01-23T10:40:05.791Z info:  HTTPS Server listening at 0.0.0.0:3000
2024-01-23T10:40:12.315Z info:  $IP - - [23/Jan/2024:10:40:12 +0000] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:12.413Z info:  $IP - - [23/Jan/2024:10:40:12 +0000] "GET /config HTTP/1.0" 304 - "https://$HOSTNAME/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:12.546Z info:  $IP - - [23/Jan/2024:10:40:12 +0000] "GET /me HTTP/1.0" 200 22 "https://$HOSTNAME/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:21.914Z info:  $IP - - [23/Jan/2024:10:40:21 +0000] "GET /auth/gitlab HTTP/1.0" 302 0 "https://$HOSTNAME/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:22.860Z info:  serializeUser: 7b98b092-f70e-473c-a72b-1f129a5cac62
2024-01-23T10:40:22.880Z info:  $IP - - [23/Jan/2024:10:40:22 +0000] "GET /auth/gitlab/callback?code=50ec1105921163acee5258c7419e88f28410fd0f55ecf6c4b55b8922be09ac88 HTTP/1.0" 302 98 "https://$GITLAB_URL/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:23.027Z info:  $IP - - [23/Jan/2024:10:40:23 +0000] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:23.169Z info:  $IP - - [23/Jan/2024:10:40:23 +0000] "GET /config HTTP/1.0" 304 - "https://$HOSTNAME/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

2024-01-23T10:40:23.262Z info:  $IP - - [23/Jan/2024:10:40:23 +0000] "GET /me HTTP/1.0" 304 - "https://$HOSTNAME/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:YYY) Gecko/XXX Firefox/YYY"

Config

"gitlab": {
    "baseURL": "https://$GITLAB_URL/",
    "clientID": "24108d72989a3xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "clientSecret": "gloas-51932xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "scope": "read_user"
}

Your Setup

• Host OS (container host): Debian GNU/Linux 12 (bookworm)
• Container Image: Debian GNU/Linux 11 (bullseye)
• NodeJS version: v20.7.0
• HedgeDoc version: 1.9.9 2023-07-30

Additional context

I'm using the official docker image with tag 1.9.9.