diff --git a/middleware.go b/middleware.go index 083b637..500366b 100644 --- a/middleware.go +++ b/middleware.go @@ -513,7 +513,7 @@ func (t *TraefikOidc) processAuthorizedRequest(rw http.ResponseWriter, req *http // When minimalHeaders is enabled, skip extra headers to prevent 431 errors if !t.minimalHeaders { - req.Header.Set("X-Auth-Request-Redirect", req.URL.RequestURI()) + req.Header.Set("X-Auth-Request-Redirect", t.originalRequestURI(req)) req.Header.Set("X-Auth-Request-User", userIdentifier) if idToken != "" { req.Header.Set("X-Auth-Request-Token", idToken)