Pocket-ID oidc

[eximo84]

So I've configured openid provider with my details for Pocket-ID however upon login attempt I get invalid credentials.

I assume this is because the default admin account didn't match my username from the oidc provider so I changed admin to my username however same issue (for reference email addresses match).

I then set the value in my hub env to create users and it created a blank user with a random username (see screenshot)

I could seem to locate any account linking options to link the default admin account to my oidc provider.

[henrygd]

Are you sure Pocket-ID is providing the email?

This is all PocketBase functionality. IIRC the username doesn't matter and accounts are linked via email.

From the screenshot it looks like the email didn't populate for the created user so I'm assuming there's an issue with PocketBase resolving that.

You might be able to find a solution by searching on PocketBase's github discussion page. I'll look into it tonight if I have time to see if there's a way to debug this from the PocketBase side.

[eximo84]

Thanks Hank. I'll do some digging into pocket base. I feel I need to ensure the correct scopes are being asked used. I can't remember if it asked for email but all other oidc connections I have made used the email each time.

[henrygd]

Try setting the log level to -4 (debug) temporarily on the PocketBase logs page. Maybe it will tell you more about what the error is.

[eximo84]

tried -4 and didnt get anything of use out of the logs. However i have noticed that the default admin is a "superuser" which doesnt seem to have the option to enable OIDC.

My both user and superuser accounts both have the same email.

[eximo84]

In theory the default scope seems to be email and profile, as seen upon first login attempt from Pocket-ID

[eximo84]

oh just read this - ignore my comment about. Superuser is different to admin user https://www.beszel.dev/guide/user-roles