From c12f183f4cf5ca129e8299a50c0e5ddf04163295 Mon Sep 17 00:00:00 2001 From: Arkadiusz Pabian Date: Mon, 8 Jun 2026 13:58:59 +0200 Subject: [PATCH] AB#4106 Fix: serve Refinery Studio over HTTPS in Docker - Map the published port to the container's TLS port (5011:443); the studio image now serves HTTPS when the mounted localhost_cert.pem is present. - Set OCTO_IDENTITY__RefineryStudioUrl=https://localhost:5011 so the identity service seeds the refinery-studio client's redirect URI and AllowedCorsOrigins with the studio's actual HTTPS origin, allowing the cross-origin /octosystem/_configuration fetch and OIDC login to succeed. Co-Authored-By: Claude Opus 4.8 (1M context) --- scripts/octo-mesh/docker-compose.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/octo-mesh/docker-compose.yml b/scripts/octo-mesh/docker-compose.yml index 90e58cd..9e1ae57 100644 --- a/scripts/octo-mesh/docker-compose.yml +++ b/scripts/octo-mesh/docker-compose.yml @@ -185,6 +185,7 @@ services: - OCTO_IDENTITY__KeyFilePath=/etc/octo-identity/IdentityServer4Auth.pfx - OCTO_IDENTITY__KEYFILEPASSWORD=mvf*vkm9ehe.hyr!KRA - OCTO_IDENTITY__AUTHORITYURL=https://octo-identity-services:5003 + - OCTO_IDENTITY__RefineryStudioUrl=https://localhost:5011 - OCTO_IDENTITY__IdentityServerLicenseKey=${IDENTITY_SERVER_LICENSE_KEY} - OCTO_IDENTITY__AutoMapperLicenseKey=${AUTOMAPPER_LICENSE_KEY} - ASPNETCORE_ENVIRONMENT=Development @@ -424,7 +425,7 @@ services: - ADMIN_PANEL_URI=https://localhost:5005 - APP_URI=https://localhost:5011 ports: - - "5011:80" + - "5011:443" networks: - octo-internal volumes: