Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Google support in examples #71

Open
stevegroom opened this issue Aug 6, 2022 · 3 comments
Open

Google support in examples #71

stevegroom opened this issue Aug 6, 2022 · 3 comments

Comments

@stevegroom
Copy link

README.md states google specifics have been removed:

Does not support Google-specific configuration (providers, providers.google.client-id, providers.google.client-secret, providers.google.prompt).

files in examples folder folder all use PROVIDERS_GOOGLE_CLIENT_ID and PROVIDERS_GOOGLE_CLIENT_SECRET

Changing these lines to CLIENT_ID, CLIENT_SECRET and adding PROVIDER_URI still results in an error:

traefik-forward-auth_1  | time="2022-08-06T16:35:15Z" level=fatal msg="provider-uri, client-id, client-secret must be set"
examples_traefik-forward-auth_1 exited with code 1
@KROSF
Copy link

KROSF commented Dec 15, 2022

add the env PROVIDER_URI=https://accounts.google.com @stevegroom

@KROSF
Copy link

KROSF commented Dec 15, 2022

don't forget to add the SCOPE variable too, separate by spaces, possible values without google verification

SCOPE=openid https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile

@stclaird
Copy link

stclaird commented Sep 9, 2024

These are the environment variables that were needed to get this working on Google and Kubernetes

Envronment Variable name Value Description
CLIENT_ID Your GCP Credential ID Get this from Oauth 2.0 Credential https://console.cloud.google.com/apis/credentials
CLIENT_SECRET Your GCP Credential Secret See Above
DOMAIN The E-mail addresses of the GCP accounts A comma seperated list of e-mails domains
PROVIDER_URI https://accounts.google.com This is the same URL for all deployments
SCOPE openid https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile A space seperated string; you can use the example supplied as is as this always the same across deployments
SECRET A-random-secret A Random secret string
ENCRYPTION_KEY RANDOM-STRING-MINIMUM-OF-16-CHARS-LONG An AES compatible string which should either be 16, 24, or 32 Bytes long

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants