OIDC Auth Source with Whitespace in name

[gummix]

Description

After upgrading our Dev-instance to 1.26.0 we could not login with our oidc provider. Message was failed to find auth source.

Problem is, our auth source is named "contoso SSO" with a whitespace. In Version 1.25.X this is no problem, because the login button is correctly using %20 as url separator, so the Auth source can be found in gitea.

With 1.26.0 the login button renders a "+" instead of the whitespace, so gitea does not find the auth source.

In 1.25.X
<a class="openidConnect ui button tw-flex tw-items-center tw-justify-center tw-py-2 tw-w-full oauth-login-link" href="/user/oauth2/contoso%20SSO">Sign in with contoso SSO</a>

In 1.26.0
<a class="ui button external-login-link tw-gap-3" data-require-appurl-check="true" rel="nofollow" href="/user/oauth2/contoso+SSO">Sign in with contoso SSO</a>

Logs:
2026/04/21 06:53:44 routers/web/auth/oauth.go:42:SignInOAuth() [E] SignIn: oauth2 source not found, name: "contoso+SSO"

Gitea Version

1.26.0

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

Ubuntu LTS 24.04

How are you running Gitea?

we are running gitea via docker compose

Database

PostgreSQL

[wxiaoguang]

Will be fixed by fix(oauth): Error on auth sources with spaces #37332 for 1.26

After one or two hours, the 1.26 nightly will be ready and contain the fix.

[wxiaoguang]

1.26 nightly is ready, it should work well for the most cases.

• https://hub.docker.com/r/gitea/gitea/tags?name=1.26-nightly
• https://dl.gitea.com/gitea/1.26-nightly/

For a complete fix, we still need this: Fix URL related escaping for oauth2 #37334

[dennisoderwald]

@wxiaoguang Great, thanks so much for the quick handling. I can confirm that it's been fixed in 1.26-nightly as a workaround.

[hmoffatt]

Problem is, our auth source is named "contoso SSO" with a whitespace. In Version 1.25.X this is no problem, because the login button is correctly using %20 as url separator, so the Auth source can be found in gitea.

I got an internal error shown after hitting Login instead. The log says

routers/web/auth/oauth.go:42:SignInOAuth() [E] SignIn: oauth2 source not found, name: "Rising+SSO"
.../context/context_response.go:81:(*Context).HTML() [D] Template: status/500

It was easy enough to rename my auth source and that worked around it for me.