OpenID with Azure AD is returning invalid_request #4336

volumes:
  db:
    external: true
    name: bookstack_db_data
  app:
    external: true
    name: bookstack_app_data

services:
  nginx-proxy:
    restart: unless-stopped
    image: {registry}/twc7fe/jwilder-nginx-proxy:v1
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - /local/home/app1/certificates:/etc/nginx/certs

  bookstack:
    image: lscr.io/linuxserver/bookstack
    container_name: bookstack
    expose:
      - "80"
    environment:
      - PUID=1000
      - PGID=1000
      - APP_URL=https://example.com
      - DB_HOST=bookstack_db
      - DB_PORT=3306
      - DB_USER=bookstack
      - DB_PASS=123456
      - DB_DATABASE=bookstackapp
      - VIRTUAL_HOST=example.com
      - VIRTUAL_PORT=80
      - AUTH_METHOD=oidc
      - AUTH_AUTO_INITIATE=false
      - OIDC_NAME=SSO
      - OIDC_DISPLAY_NAME_CLAIMS=preferred_username
      - OIDC_CLIENT_ID=client_id
      - OIDC_CLIENT_SECRET="password"
      - OIDC_ISSUER="https://login.microsoftonline.com/{tenant}/v2.0"
      - OIDC_ISSUER_DISCOVER=true
      - OIDC_DUMP_USER_DETAILS=true
      - APP_DEBUG=true
      - CURL_CA_BUNDLE=/certs/cacert.pem
    volumes:
      - app:/config
      - /local/home/app1/docker-compose/bookstack/cacert:/certs
    networks:
      - default
    restart: unless-stopped
    depends_on:
      - bookstack_db

  bookstack_db:
    image: lscr.io/linuxserver/mariadb
    container_name: bookstack_db
    environment:
      - PUID=1000
      - PGID=1000
      - MYSQL_ROOT_PASSWORD=123456
      - TZ=Europe/London
      - MYSQL_DATABASE=bookstackapp
      - MYSQL_USER=bookstack
      - MYSQL_PASSWORD=123456
    volumes:
      - db:/config
    networks:
      - default
    restart: unless-stopped

networks:
  default:
    external: true
    name: bookstack