Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

documentation: fill correct callback urls for authelia OIDC #171

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

documentation: fill correct callback urls for authelia OIDC #171

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 12 additions & 11 deletions pages/docs/configuration/authentication/OAuth2-OIDC/authelia.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,22 +7,22 @@ description: Learn how to configure LibreChat to use Authelia for user authentic

- Generate a client secret using:
```
docker run authelia/authelia:latest authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72 --random.charset rfc3986
docker run --rm authelia/authelia:latest authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72 --random.charset rfc3986
```
- Then in your `configuration.yml` add the following in the oidc section:
```bash filename="configuration.yml"
- id: librechat
description: LibreChat
secret: '$pbkdf2-GENERATED_SECRET_KEY_HERE'
- client_id: 'librechat'
client_name: 'LibreChat'
client_secret: '$pbkdf2-GENERATED_SECRET_KEY_HERE'
public: false
authorization_policy: two_factor
authorization_policy: 'two_factor'
redirect_uris:
- 'https://LIBRECHAT.URL/oauth/openid/callback'
scopes:
- openid
- profile
- email
userinfo_signing_algorithm: none
- 'openid'
- 'profile'
- 'email'
userinfo_signing_algorithm: 'none'
```
- Then restart Authelia

Expand All @@ -32,10 +32,11 @@ description: Learn how to configure LibreChat to use Authelia for user authentic
```bash filename=".env"
ALLOW_SOCIAL_LOGIN=true
OPENID_BUTTON_LABEL='Log in with Authelia'
OPENID_ISSUER=https://auth.example.com
OPENID_ISSUER=https://auth.example.com/.well-known/openid-configuration
OPENID_CLIENT_ID=librechat
OPENID_CLIENT_SECRET=ACTUAL_GENERATED_SECRET_HERE
OPENID_SESSION_SECRET=ANY_RANDOM_STRING
OPENID_CALLBACK_URL=https://auth.example.com/api/oidc/authorization
OPENID_CALLBACK_URL=/oauth/openid/callback
OPENID_SCOPE="openid profile email"
OPENID_IMAGE_URL=https://www.authelia.com/images/branding/logo-cropped.png
```