Describe the problem

I have multiple issues with configuration of Azure OIDC.

1. There is some problem with scopes how are handled, it's look like it's trying to merge scopes like 1,2,3 but it should be handled one by one.

AADSTS650053: The application 'PowerAdmin' asked for scope 'openid,email,profile' that doesn't exist on the resource '00000003-0000-0000-c000-000000000000'. Contact the app vendor.

If I change from default

'scopes' => 'openid email profile'

to only one required scope openid

'scopes' => 'opened'

process will continue, but after that I have an issue with redirect URL.

2. Redirect URL issue

I'm running PowerAdmin as Docker container in docker swarm mode with Traefik in front of and somehow it's trying to use HTTP instead of HTTPS in communication with Azure.

HTTP redirect urls are not allowed only for http:localhost

So it' fail with message

AADSTS50011: The redirect URI 'http://poweradmin.example.com/oidc/callback' specified in the request does not match the redirect URIs configured for the application 'MY_TENANT_ID'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal. Navigate to https://aka.ms/redirectUriMismatchError to learn more about how to fix this.

3. metadata URL issue

In default configuration is a type of URL

https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid_configuration

Should be

https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration

Steps to reproduce

Conf issues

Poweradmin version

latest

Database

MariaDB

Additional information (optional)

No response