Trouble setting up OIDC #1545
Description
Hi, I'm trying to set up Docspell with Authentik OAuth. I have set it up through environment variable and it seems like
- all containers are running without errors
- the Authentik OIDC login button shows up on the web UI
When I try to log in, I get "Access denied" in the web UI. In the rest server logs I see:
2022.05.05 15:06:51:0000 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 GET /api/v1/open/auth/openid/authentik
2022.05.05 15:06:51:0001 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 302 Found
2022.05.05 15:06:51:0000 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 GET /sw.js
2022.05.05 15:06:51:0001 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 200 OK
2022.05.05 15:06:52:0000 [io-comp...] [INFO ] docspell.oidc.CodeFlowRoutes.userInfo:70 - Resume OAuth/OIDC flow for authentik
2022.05.05 15:06:52:0000 [io-comp...] [ERROR] docspell.oidc.CodeFlow.fetchAccessToken:121 - Error obtaining access token '301' / IO(...)
2022.05.05 15:06:52:0001 [io-comp...] [WARN ] docspell.oidc.CodeFlowRoutes.applyOrElse:95 - Error resuming code flow from 'authentik'
2022.05.05 15:06:52:0002 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 GET /api/v1/open/auth/openid/authentik/resume?code=55b02854db8e4eae979e7ff6f480eaec&state=
2022.05.05 15:06:52:0003 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 307 Temporary Redirect
2022.05.05 15:06:52:0000 [io-comp...] [INFO ] org.http4s.server.middleware.Logger - HTTP/1.1 GET /app/login?openid=1
Any ideas what's going on here?