diff --git a/packages/auth/providers/oidc/oidc-provider.ts b/packages/auth/providers/oidc/oidc-provider.ts index d4e3b5d0d..bd72f9359 100644 --- a/packages/auth/providers/oidc/oidc-provider.ts +++ b/packages/auth/providers/oidc/oidc-provider.ts @@ -22,6 +22,27 @@ export const OidcProvider = (headers: ReadonlyHeaders | null): OIDCConfig { + if (response.status === 401) return response; + + const newHeaders = Array.from(response.headers.entries()) + .filter(([key]) => key.toLowerCase() !== "www-authenticate") + .reduce((headers, [key, value]) => { + headers.append(key, value); + return headers; + }, new Headers()); + + return new Response(response.body, { + status: response.status, + statusText: response.statusText, + headers: newHeaders, + }); + }, + }, // idToken false forces the use of the userinfo endpoint // Userinfo endpoint is required for authelia since v4.39 // See https://github.com/homarr-labs/homarr/issues/2635