Working only in the root folder?

[ifixr]

I believe this script will work only when the website is not is a subfolder.

[SadFool]

Even if it's quite late, but I was in the same situation.

In my case, I access https://server.domain.lab/portal and perform the Entra auth from https://server.domain.lab/portal/oauth.php. However, after successfully authenticating, the file www/oauth.php would redirect to the incorrect subfolder based on line 48
header('Location: ' . $sessionData['txtRedir']);

Checking the flow of the code, the txtRedir value in the database is written by inc/auth.php in line 107:
$returnMySQL = $this->modDB->Insert('tblAuthSessions', array('txtSessionKey' => $sessionKey, 'txtRedir' => $url, 'txtCodeVerifier' => $this->oAuthVerifier, 'dtExpires' => date('Y-m-d H:i:s', strtotime('+5 minutes'))));

Of importance here is the value of $url, which is defined in inc/auth.php in line 32:
$url = _URL . $_SERVER['REQUEST_URI'];

So after successfully authenticating, I would be redirected to https://server.domain.lab/portal/portal/.

My solution was to change inc/auth.php in line 32 to:
$url = _URL;

That fixed the issue.

I hope this can help anyone who runs into the same situation.

Quick Remarks:
config.inc Line 49 is: https://server.domain.lab/portal