title: Nginx and Oauth2-proxy: After logging in with Google, redirects back to Oauth login page
body: <p>I am trying to use Oauth2-proxy as a gateway to my web site with Google auth. The Oauth login page appears, and you can click &quot;Sign In&quot; which takes you to a Google login page, but after logging in it redirects straight back to the Oauth login page. I suspect it has something to do with cookies but I don't know where I'm going wrong.</p>
  <p>NGINX config:</p>
  <pre><code>server {
    listen 443;
    server_name my.website.com;
  
    ssl on;
    ssl_certificate /etc/ssl/my.website.com.pem;
    ssl_certificate_key /etc/ssl/my.website.com.key;
  
    location /oauth2/ {
      proxy_pass       http://127.0.0.1:4180;
      proxy_set_header Host                    $host;
      proxy_set_header X-Real-IP               $remote_addr;
      proxy_set_header X-Scheme                $scheme;
      proxy_set_header X-Auth-Request-Redirect $request_uri;
    }
    location = /oauth2/auth {
      proxy_pass       http://127.0.0.1:4180;
      proxy_set_header Host             $host;
      proxy_set_header X-Real-IP        $remote_addr;
      proxy_set_header X-Scheme         $scheme;
      proxy_set_header Content-Length   &quot;&quot;;
      proxy_pass_request_body           off;
    }
  
    location / {
      auth_request /oauth2/auth;
      error_page 401 = /oauth2/sign_in;
  
      # pass information via X-User and X-Email headers to backend,
      # requires running with --set-xauthrequest flag
      auth_request_set $user   $upstream_http_x_auth_request_user;
      auth_request_set $email  $upstream_http_x_auth_request_email;
      proxy_set_header X-User  $user;
      proxy_set_header X-Email $email;
  
      # if you enabled --pass-access-token, this will pass the token to the backend
      auth_request_set $token  $upstream_http_x_auth_request_access_token;
      proxy_set_header X-Access-Token $token;
  
      # if you enabled --cookie-refresh, this is needed for it to work with auth_request
      auth_request_set $auth_cookie $upstream_http_set_cookie;
      add_header Set-Cookie $auth_cookie;
  
      # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
      # limit and so the OAuth2 Proxy splits these into multiple parts.
      # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the respon$
      # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
      auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;
  
      # Extract the Cookie attributes from the first Set-Cookie header and append them
      # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
      if ($auth_cookie ~* &quot;(; .*)&quot;) {
          set $auth_cookie_name_0 $auth_cookie;
          set $auth_cookie_name_1 &quot;auth_cookie_name_1=$auth_cookie_name_upstream_1$1&quot;;
      }
  
      # Send both Set-Cookie headers now if there was a second part
      if ($auth_cookie_name_upstream_1) {
          add_header Set-Cookie $auth_cookie_name_0;
          add_header Set-Cookie $auth_cookie_name_1;
      }
      
      proxy_set_header   X-Forwarded-For $remote_addr;
      proxy_set_header   Host $http_host;
      proxy_pass         &quot;http://127.0.0.1:8888&quot;; # This is where my web server is hosted
    }
  }
  </code></pre>
  <p>Oauth2-proxy config:</p>
  <pre><code>cookie_secret=&quot;&quot; # Filled in with a base64 string
  provider=&quot;google&quot;
  email_domains=&quot;*&quot;
  client_secret=&quot;&quot; # Filled in with Google auth client secret
  client_id=&quot;&quot; # Filled in with Google auth client ID
  cookie_secure=&quot;false&quot; # No idea what to set this as, tried both false and true, same result
  redirect_url=&quot;https://my.website.com/oauth2/auth/&quot;
  upstreams=&quot;http://127.0.0.1:8888/&quot; # My website server
  </code></pre>
  <p>Oauth2-proxy startup command:</p>
  <pre><code>~/oauth2-proxy-v6.1.1.linux-amd64/oauth2-proxy --config=/home/username/work/src/github.com/oauth2-proxy/oauth2-proxy/contrib/local-environment/oauth2-proxy.cfg
  </code></pre>
  <p>Any ideas would be greatly appreciated!</p>