Skip to content

Authentik oAuth setup documentation updates#5969

Merged
Alkarex merged 8 commits intoFreshRSS:edgefrom
laxmanpradhan:patch-1
Dec 30, 2023
Merged

Authentik oAuth setup documentation updates#5969
Alkarex merged 8 commits intoFreshRSS:edgefrom
laxmanpradhan:patch-1

Conversation

@laxmanpradhan
Copy link
Contributor

@laxmanpradhan laxmanpradhan commented Dec 23, 2023

Closes #

Changes proposed in this pull request:

  • Updated the Redirect URL documents to include port number. Required for authentik at least, however I suspect this is a FreshRSS issue as I have seafile oAuth setup the same way and the redirect URL does not require the port. Without the port number Authentik gives a redirect_url error.
  • Many small clarifications and improvements to make setup easier

How to test the feature manually:

  1. Create a new FreshRSS docker install follow the new instructions for oAuth, will be much easier to follow.

Pull request checklist:

  • [ x] clear commit messages
  • [ x] documentation updated

Additional information can be found in the documentation.

@laxmanpradhan
Update 16_OpenID-Connect-Authentik.md
5cbfbca 
updated docs
@laxmanpradhan
Add files via upload
cca30f3
@laxmanpradhan
Update 16_OpenID-Connect-Authentik.md
70bdf39 
Updated documentation with many clarifications. The most important one is the redirect URL which must include the port or it will not work. To ensure compatibility, I have recommended both URLs be added, with and without the port. Example docker-compose also added with traefik reverse proxy.
@Alkarex Alkarex added this to the 1.23.0 milestone Dec 23, 2023
@Alkarex Alkarex modified the milestones: 1.23.0, 1.24.0 Dec 23, 2023
@Alkarex
Copy link
Member

Alkarex commented Dec 23, 2023 •
edited
Loading

Let's try to fix the problem you are describing:

Not sure how to setup OIDC into an existing installation because you get stuck in a loop. The last step after everything works, is to login to FreshRSS and under FreshRSS > Settings > Authentication, you need to change the user to HTTP. But this setting is only available if you have OIDC enabled. But if you enable OIDC and try to login you have to login with a user that already has HTTP enabled. I got it to work because I was setting up a fresh install and so it brought me to the page to create the user, I made one with the same name as my oAuth admin user and then I was able to immediately set it to HTTP in the settings before logging out.

Changing to HTTP should be possible after 0140469

@Alkarex Alkarex modified the milestones: 1.24.0, 1.23.0 Dec 23, 2023
@Alkarex
Copy link
Member

Alkarex commented Dec 23, 2023

Could you please check @laxmanpradhan ?

@Alkarex Alkarex modified the milestones: 1.23.0, 1.24.0 Dec 23, 2023
@Alkarex Alkarex merged commit 77108ea into FreshRSS:edge Dec 30, 2023
@laxmanpradhan laxmanpradhan deleted the patch-1 branch January 12, 2024 01:42
@laxmanpradhan laxmanpradhan mentioned this pull request Apr 25, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Documentation 📚 Security 🛡️

Projects

None yet

Milestone

1.24.0

Development

Successfully merging this pull request may close these issues.

2 participants

@laxmanpradhan @Alkarex