Authelia OIDC Client Config - Hoarder OAUTH SSO

[tdharris]

In case it's ever helpful for someone, I thought I'd share a sample config for an Authelia OIDC Integration:

1. Authelia client config:

   - client_id: 'hoarder'
     client_name: 'Hoarder'
     client_secret: '<generated_plaintext_client_secret>'
     token_endpoint_auth_method: client_secret_basic
     authorization_policy: two_factor # optional
     redirect_uris:
       - 'https://<hoarder_address>/api/auth/callback/custom'
     audience: # optional
       - 'https://<hoarder_address>'
     grant_types: # optional
       - authorization_code
     scopes:
       - openid
       - profile
       - email

   • Based on various failed attempts, it seemed that token_endpoint_auth_method: client_secret_basic was necessary, with the client_secret configured with a plaintext value. For more information, see How Do I Generate a Client Identifier or Client Secret.

2. Hoarder config:

   # .env
   OAUTH_WELLKNOWN_URL=https://<authelia_address>/.well-known/openid-configuration
   OAUTH_CLIENT_SECRET=<plaintext_client_secret_from_authelia>
   OAUTH_CLIENT_ID=hoarder
   OAUTH_PROVIDER_NAME=authelia
   NEXTAUTH_URL=https://<hoarder_address>

Note

Please let me know if there are other known working configs that might be helpful.

[kamtschatka]

When trying it out during development, I used this:

with google, i followed this tutorial: https://www.youtube.com/watch?v=ot9yuKg15iA

OAUTH_WELLKNOWN_URL=https://accounts.google.com/.well-known/openid-configuration
OAUTH_CLIENT_SECRET=<hidden>
OAUTH_CLIENT_ID=<hidden>
OAUTH_PROVIDER_NAME=Google

For authentik I simply set up an Application with OAuth2 provider and confidential Client Type

OAUTH_WELLKNOWN_URL=http://<authentik>/application/o/hoarder/.well-known/openid-configuration
OAUTH_CLIENT_SECRET=<hidden>
OAUTH_CLIENT_ID=<hidden>
OAUTH_PROVIDER_NAME=Authentik