Hi folks-
I've been beating my head against a weird issue and I'm hoping the smart folks here can help. I've got what I *think* should be a super-simple setup, where I have an Oauth2 client registered in the console as a "web application", and have that client configured in a local keycloak instance to "broker" authentications over to Google. But for whatever weird reason, the auth flow hits google, prompts for email then password, and then redirects over to a youtube page where it just seems to hang for an extended period. Sometimes the flow will eventually complete, other times it times out and I have to begin a new login flow. But in no case does it ever flow "smoothly" through Google back to my client.
I'm at a total loss for what might be causing this behavior. The client is just configured to do authentication - not requesting any weird scopes beyond the standard OIDC-related ones. This is an internal-only site, so it's nowhere close to any API or user limits.
Yes, my school encounters it. Randomly the Chromebooks will go to accounts.youtube.com when users are logging into Google. We thought it was a problem with our filtering system. I haven't had much luck in finding more information on fixing it.