# Oauth with internal-only domain? **URL:** \ **Category:** Dashboards\ **Tags:** chronograf\ **Created:** [June 21, 2017, 2:13am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376 "2017-06-21T02:13:27Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![austinbutler](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/austinbutler/32/1662_2.png) [@austinbutler](https://community.influxdata.com/u/austinbutler)\ **Post date:** [June 21, 2017, 2:13am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/1 "2017-06-21T02:13:27Z")
Am I mistaken or does the Google OAuth require the domain to be public? Then for Github it seems that’s only [Github.com](http://Github.com), right? I don’t see any options that would support Enterprise Github. ---
**Author:** ![tim](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/tim/32/1658_2.png) [@tim](https://community.influxdata.com/u/tim)\ **Post date:** [June 21, 2017, 4:32pm UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/2 "2017-06-21T16:32:30Z")
Hey @austinbutler ! Yes, unfortunately Google’s OAuth2 implementation wants the domain for Chronograf to be publicly reachable. You’re also correct in assuming that the default Github OAuth2 implementation assumes [Github.com](http://Github.com). However, I think that you should be able to use Github Enterprise using our Generic OAuth2 support by grabbing the URLs from [Github’s documentation](https://developer.github.com/apps/building-integrations/setting-up-and-registering-oauth-apps/about-authorization-options-for-oauth-apps/) and replacing `api.github.com` with the domain that Github Enterprise is running at. Please let me know how you make out! Tim ---
**Author:** ![austinbutler](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/austinbutler/32/1662_2.png) [@austinbutler](https://community.influxdata.com/u/austinbutler)\ **Post date:** [June 21, 2017, 5:28pm UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/3 "2017-06-21T17:28:50Z")
That was the exact idea I had a bit after posting this. Will update if I get it working. ---
**Author:** ![austinbutler](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/austinbutler/32/1662_2.png) [@austinbutler](https://community.influxdata.com/u/austinbutler)\ **Post date:** [December 2, 2017, 2:59am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/4 "2017-12-02T02:59:57Z")
Had some time to return to this. I am hosting Chronograf at [example.com/chronograf](http://example.com/chronograf) so I go there, then it says “Login with Generic.” I click that, it opens the right Github page that shows the project I created. I click “Authorize application” on Github. What happens next depends if `GENERIC_NAME` is defined. If it isn’t, it takes me to [example.com/login](http://example.com/login), which is actually Grafana being served at the root of the domain, so it shows the Grafana login if I am not logged in to Grafana or just goes to the Grafana homepage if I am logged in. If I do define `GENERIC_NAME` then I get taken to [example.com/chronograf/oauth/generic/callback](http://example.com/chronograf/oauth/generic/callback) but Chronograf shows a 404 error (“bummer…”). The error with no `GENERIC_NAME` is: ``` msg="Unable to get principal identifier Get : unsupported protocol scheme \"\"" component=auth method=GET remote_addr="127.0.0.1:57886" url=/chronograf/oauth/generic/callback?code=` ``` These are my environment variables for Chronograf: ``` HOST=127.0.0.1 BASE_PATH=/chronograf PREFIX_ROUTES=true LOG_LEVEL=debug TOKEN_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxx GENERIC_CLIENT_ID=xxxxxxxxxxxxxxxxxxx GENERIC_CLIENT_SECRET=xxxxxxxxxxxxxxxxxxxxxxxx GENERIC_AUTH_URL=https://github.example.com/login/oauth/authorize GENERIC_TOKEN_URL=https://github.example.com/login/oauth/access_token AUTH_DURATION=12h GENERIC_NAME=Github ``` Chronograf and Grafana are both behind NGINX reverse proxy. Both work totally fine aside from this issue. The homepage URL in Github is set to `https://example.com/chronograf` and the callback URL is set to `https://example.com/chronograf/oauth/generic/callback`. When I use `GENERIC_NAME` I change “generic” in the callback URL. Not sure where I am going wrong, but the fact that I get redirected to /login instead of /chronograf/login makes me think maybe it’s something where this portion of Chronograf isn’t respecting the `BASE_PATH`. Any ideas @tim? ---
**Author:** ![stevebang](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/stevebang/32/667_2.png) [@stevebang](https://community.influxdata.com/u/stevebang)\ **Post date:** [January 3, 2018, 12:03am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/5 "2018-01-03T00:03:08Z")
One issue that I see is that the value you use in GENERIC\_NAME needs to replace “generic” in the callback URL. This was undocumented (and also incorrectly documented). In your example, since GENERIC\_NAME=Github, the correct callback URL should be: [example.com/chronograf/oauth/Github/callback](http://example.com/chronograf/oauth/Github/callback) Here are two open, related issues I’m working on: > > > The generic OAuth provider documentation states: > > \`\`\`text > The generic OAuth2 …provider is very similar to the Github provider, but, you are able to set your own authentication, token, and API URLs. The callback URL path will be /oauth/generic/callback. So, if your Chronograf is hosted at https://localhost:8888 then the full callback URL would be https://localhost:8888/oauth/generic/callback. > \`\`\` > > This isn't actually true if you set \`\`GENERIC\_NAME\`\`, in which case the callback URL includes the generic name in the URL (\[cf\](https://github.com/influxdata/chronograf/blob/8a0498162817b1850d05fe5c2a9032828a10b98e/server/server.go#L218)). > > > Absolutely frustrating process > > \###### URL for relevant page? > https://docs.in…fluxdata.com/chronograf/v1.3/administration/security-best-practices/ > > \###### What products and version are you using? > 1.3 of Chronograf and 10.3.1 of Gitlab > > \###### Where did you look before opening the issue? > All over the internet via google > > 1.) GENERIC\_NAME doesn't only change the name of the login provider on the login page, it also changes the callback URL -- required Postman to see the exact redir url before being redirected to error page stating "The redirect URI included is not valid" > > GENERIC\_NAME=GitLab > > changes: > https://influx.home.my:8888/oauth/generic/callback > to: > https://influx.home.my:8888/oauth/GitLab/callback > > 2.) after spending 8 hours trying to get OAuth to work I'm now successfully forwarding to GitLab, logging in and getting redirected to Chronograf login page. I click "Login to Gitlab" and bounced right back to the Chronograf login page. > > Please add documentation on setting up basic auth or fronting Chrongraf with nginx. As of now I disabled auth just to be able to use it. About to just ditch it and move on. ---
**Author:** ![austinbutler](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/austinbutler/32/1662_2.png) [@austinbutler](https://community.influxdata.com/u/austinbutler)\ **Post date:** [January 3, 2018, 12:49am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/6 "2018-01-03T00:49:23Z")
Hey @stevebang, I eventually figured out you have to change the callback URL to match the GENERIC\_NAME (although it seems it has to be lower case, otherwise I get a 404). But the confusing documentation still doesn’t seem to be the root issue for me since even with the correct callback URL I just get sent back to /login on the domain (Grafana in my case, since I am serving Chronograf from a subfolder), and I am not logged in. The [Gitlab Oauth issue](https://github.com/influxdata/docs.influxdata.com/issues/1365) shows the same problem I think: “I click ‘Login to Gitlab’ and bounced right back to the Chronograf login page.” ---
**Author:** ![jaredscheib](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/jaredscheib/32/299_2.png) [@jaredscheib](https://community.influxdata.com/u/jaredscheib)\ **Post date:** [January 5, 2018, 12:15am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/7 "2018-01-05T00:15:00Z")
Hi @austinbutler, could it be that Grafana’s process is taking precedence on that callback URL? It’s difficult to disambiguate as it sounds like you have Grafana configured for the same URL. As for the rest of the issue, it does sound like it’s captured by the referenced GitHub issue, yes? Thanks for writing in~ ---
**Author:** ![austinbutler](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/austinbutler/32/1662_2.png) [@austinbutler](https://community.influxdata.com/u/austinbutler)\ **Post date:** [January 5, 2018, 12:42am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/8 "2018-01-05T00:42:43Z")
I believe I tried setting NGINX to pass the headers as you suggested on the Github issue. I will try to confirm for sure, though. ---
**Author:** ![jaredscheib](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/jaredscheib/32/299_2.png) [@jaredscheib](https://community.influxdata.com/u/jaredscheib)\ **Post date:** [January 5, 2018, 2:10am UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/10 "2018-01-05T02:10:13Z")
Thanks – I’m not sure what else to think currently, but eliminating that problem will help us diagnose the root, if the problem remains. ---
**Author:** ![austinbutler](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/austinbutler/32/1662_2.png) [@austinbutler](https://community.influxdata.com/u/austinbutler)\ **Post date:** [March 17, 2018, 9:09pm UTC](https://community.influxdata.com/t/oauth-with-internal-only-domain/1376/11 "2018-03-17T21:09:35Z")
I’ve come back to this after seeing the updates on the Github issues, but I still can’t get this working. In fact, it’s not even showing me any Github pages at this point, whereas before it would at least show me the Github auth page for the app and would later show a registered user on Github. With what seems to be the recommended config, I always get “[redirect\_uri\_mismatch](https://developer.github.com/apps/managing-oauth-apps/troubleshooting-oauth-app-access-token-request-errors/#redirect-uri-mismatch)” in the logs. But as far as I can tell I have that set properly in Github. Is there any way to see what Chronograf is sending for that value? Based on the error it seems Chronograf is not sending the right URI. Or perhaps that’s a red herring and I’ve made a simple mistake somewhere. 🤤 Chronograf version: ```auto [abutler@dev ~]$ chronograf --version 2018/03/17 20:44:26 Chronograf 1.4.2.3 (git: ee9111d04dd386bdb9f1ead484fb709c224d41a4) ``` NGINX config: ```auto [abutler@dev ~]$ cat /etc/nginx/conf.d/grafana.conf # Redirect all HTTP requests to HTTPS server { listen 80 default_server; server_name _; return 301 https://$host$request_uri; } server { listen 443 ssl; server_name REDACTED_MY_IP; ssl_certificate /etc/pki/tls/certs/cert.crt; ssl_certificate_key /etc/pki/tls/private/cert.key; ssl_session_timeout 1d; ssl_session_cache shared:SSL:50m; ssl_protocols TLSv1.2; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; ssl_prefer_server_ciphers on; # HSTS (31536000 seconds = 1 year) add_header Strict-Transport-Security "max-age=31536000 includeSubDomains" always; proxy_set_header HOST $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Grafana location / { proxy_pass http://127.0.0.1:3000; } # Chronograf location /chronograf { proxy_pass http://127.0.0.1:8888; } } ``` Chronograf environment variables (via systemd override): ```auto [abutler@dev ~]$ cat /etc/systemd/system/chronograf.service.d/override.conf [Service] Environment=HOST=127.0.0.1 Environment=BASE_PATH=/chronograf Environment=PREFIX_ROUTES=true Environment=LOG_LEVEL=debug Environment='TOKEN_SECRET=REDACTED_SECRET' Environment=GENERIC_CLIENT_ID=REDACTED_CLIENT_ID Environment=GENERIC_CLIENT_SECRET=REDACTED_CLIENT_SECRET Environment=GENERIC_AUTH_URL=https://interal_github.example.com/login/oauth/authorize Environment=GENERIC_TOKEN_URL=https://interal_github.example.com/login/oauth/access_token Environment=AUTH_DURATION=12h Environment=GENERIC_NAME=Github Environment=GENERIC_API_URL=https://interal_github.example.com/api/user Environment=PUBLIC_URL=https://REDACTED_MY_IP/chronograf Environment='GENERIC_SCOPES=user:email read:org' ``` Logs from a single login attempt: ```auto [abutler@dev ~]$ sudo journalctl -u chronograf --since '2018-03-17 20:54:00' --no-pager -- Logs begin at Tue 2018-03-13 10:24:29 UTC, end at Sat 2018-03-17 20:56:28 UTC. -- Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36300" url=/chronograf Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36300" url= Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36300" response_time=1.215565ms status=200 Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36302" url=/chronograf/chronograf.css Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36302" url=/chronograf.css Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36302" response_time=123.266707ms status=200 Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36304" url=/chronograf/manifest.908d0133da396e4dd66b.js Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36304" url=/manifest.908d0133da396e4dd66b.js Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36304" response_time="843.876µs" status=200 Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36306" url=/chronograf/vendor.6eb26e15a9f2970496d1.js Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36306" url=/vendor.6eb26e15a9f2970496d1.js Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36308" url=/chronograf/app.474dc3ad68b5acc214ef.js Mar 17 20:54:00 dev chronograf[19381]: time="2018-03-17T20:54:00Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36308" url=/app.474dc3ad68b5acc214ef.js Mar 17 20:54:01 dev chronograf[19381]: time="2018-03-17T20:54:01Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36308" response_time=770.516857ms status=200 Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36306" response_time=1.621366371s status=200 Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36310" url=/chronograf/chronograf/v1 Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36310" response_time="131.266µs" status=200 Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36312" url=/chronograf/chronograf/v1/me Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=error msg="Invalid principal" component="token_auth" method=GET remote_addr="127.0.0.1:36312" url=/chronograf/chronograf/v1/me Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Response: Forbidden" component=server method=GET remote_addr="127.0.0.1:36312" response_time="107.677µs" status=403 Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36314" url=/chronograf/2bb64b4255c3d298ecae22d2053b77c2.svg Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36316" url=/chronograf/756cfeadfdbf9222a81d41b8931ba2a4.svg Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36314" url=/2bb64b4255c3d298ecae22d2053b77c2.svg Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36316" url=/756cfeadfdbf9222a81d41b8931ba2a4.svg Mar 17 20:54:02 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36316" response_time=1.057938ms status=200 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36318" url=/chronograf/3f68500b267c20051088bcc0698af773.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:02Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36318" url=/3f68500b267c20051088bcc0698af773.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36320" url=/chronograf/893fe14628bd7ac498d550e96367e1be.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36320" url=/893fe14628bd7ac498d550e96367e1be.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36318" response_time=90.779969ms status=200 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36322" url=/chronograf/ac3f799d5bbaf5196fab15ab8de8431c.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36322" url=/ac3f799d5bbaf5196fab15ab8de8431c.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36320" response_time=71.096897ms status=200 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36314" response_time=149.441597ms status=200 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36322" response_time=64.145291ms status=200 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36324" url=/chronograf/d329cc8b34667f114a95422aaad1b063.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36326" url=/chronograf/ccc59a4ae2da74b29a40b16bc4fbdbd0.woff2 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36326" url=/ccc59a4ae2da74b29a40b16bc4fbdbd0.woff2 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36324" url=/d329cc8b34667f114a95422aaad1b063.ttf Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36326" response_time=4.62427ms status=200 Mar 17 20:54:03 dev chronograf[19381]: time="2018-03-17T20:54:03Z" level=info msg="Response: OK" component=server method=GET remote_addr="127.0.0.1:36324" response_time=66.064421ms status=200 Mar 17 20:54:04 dev chronograf[19381]: time="2018-03-17T20:54:04Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36328" url=/chronograf/oauth/github/login Mar 17 20:54:04 dev chronograf[19381]: time="2018-03-17T20:54:04Z" level=info msg="Response: Temporary Redirect" component=server method=GET remote_addr="127.0.0.1:36328" response_time="225.655µs" status=307 Mar 17 20:54:05 dev chronograf[19381]: time="2018-03-17T20:54:05Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36330" url=/chronograf/oauth/github/callback?error=redirect_uri_mismatch&error_description=The+redirect_uri+MUST+match+the+registered+callback+URL+for+this+application.&error_uri=https%3A%2F%2Fdeveloper.github.com%2Fenterprise%2F2.11%2Fv3%2Foauth%2F%23redirect-uri-mismatch&state=REDACTED Mar 17 20:54:35 dev chronograf[19381]: time="2018-03-17T20:54:35Z" level=error msg="Unable to exchange code for token Post https://interal_github.example.com/login/oauth/access_token: dial tcp REDACTED_INTERNAL_GH_IP:443: i/o timeout" component=auth method=GET remote_addr="127.0.0.1:36330" url=/chronograf/oauth/github/callback?error=redirect_uri_mismatch&error_description=The+redirect_uri+MUST+match+the+registered+callback+URL+for+this+application.&error_uri=https%3A%2F%2Fdeveloper.github.com%2Fenterprise%2F2.11%2Fv3%2Foauth%2F%23redirect-uri-mismatch&state=REDACTED Mar 17 20:54:35 dev chronograf[19381]: time="2018-03-17T20:54:35Z" level=info msg="Response: Temporary Redirect" component=server method=GET remote_addr="127.0.0.1:36330" response_time=30.000646391s status=307 Mar 17 20:54:35 dev chronograf[19381]: time="2018-03-17T20:54:35Z" level=debug msg=Request component=server method=GET remote_addr="127.0.0.1:36334" url=/chronograf/chronograf/login/ Mar 17 20:54:35 dev chronograf[19381]: time="2018-03-17T20:54:35Z" level=info msg="Serving assets" component=server method=GET remote_addr="127.0.0.1:36334" url=/chronograf/login/ Mar 17 20:54:35 dev chronograf[19381]: time="2018-03-17T20:54:35Z" level=info msg="Response: Moved Permanently" component=server method=GET remote_addr="127.0.0.1:36334" response_time="495.941µs" status=301 ``` Enterprise Github Homepage URL: ```auto https://REDACTED_MY_IP/chronograf ``` Enterprise Github Authorization callback URL: ```auto https://REDACTED_MY_IP/chronograf/oauth/github/callback ```