No password prompt on Apache site

Help
,
1

I’m trying to add Auth0 to a website on a VPS server that I run. I copied the website content to /home/xxxxx/www/site. I made another folder for the redirect at /home/xxxxx/www/auth0, and a logout URL in /home/xxxxx/www/logout. I put the recommended settings in /etc/apache/ ```
mods-available/auth_openidc.conf:

# mods-available/auth_openidc.conf

OIDCProviderMetadataURL https://dev-{code here}.us.auth0.com/.well-known/openid-configuration
OIDCClientID {id here}
OIDCClientSecret 'YOUR_CLIENT_SECRET'

OIDCScope "openid name email"
OIDCRedirectURI https://www.xxxxx.org/auth0/
OIDCCryptoPassphrase <passwordToEncryptTheSessionInformationOnTheCookie>

<Location /home/xxxxx/www/site>
   AuthType openid-connect
   Require valid-user
   LogLevel debug
</Location>

The auth_openidc module is enabled. This site is configured as a VirtualHost on apache.

The problem is that when I go to the website, it just shows me the content without prompting me for a password. Do I have to make a login form or modify my website content to get it to require a login before viewing the main site content?

1 Like