the current gitea docs don't specify the callback url to set in authentik. url to set is https://gitea.company/user/oauth2/CaSeSeNsItIvE/callback