|
@@ -1,7 +1,3 @@
|
|
|
----
|
|
|
-sidebar_position: 6
|
|
|
----
|
|
|
-
|
|
|
# OAuth Authentication
|
|
|
|
|
|
This page contains details about using OAuth in Immich.
|
|
@@ -44,15 +40,15 @@ You **MUST** include `app.immich:/` as the redirect URI for iOS and Android mobi
|
|
|
|
|
|
Once you have a new OAuth client application configured, Immich can be configured using the Administration Settings page, available on the web (Administration -> Settings).
|
|
|
|
|
|
-| Setting | Type | Default | Description |
|
|
|
-| ------------------- | ------- | -------------------- | ------------------------------------------------------------------------- |
|
|
|
-| OAuth enabled | boolean | false | Enable/disable OAuth2 |
|
|
|
-| OAuth issuer URL | URL | (required) | Required. Self-discovery URL for client (from previous step) |
|
|
|
-| OAuth client ID | string | (required) | Required. Client ID (from previous step) |
|
|
|
-| OAuth client secret | string | (required) | Required. Client Secret (previous step) |
|
|
|
-| OAuth scope | string | openid email profile | Full list of scopes to send with the request (space delimited) |
|
|
|
-| OAuth button text | string | Login with OAuth | Text for the OAuth button on the web |
|
|
|
-| OAuth auto register | boolean | true | When true, will automatically register a user the first time they sign in |
|
|
|
+| Setting | Type | Default | Description |
|
|
|
+| ------------- | ------- | -------------------- | ------------------------------------------------------------------------- |
|
|
|
+| Enabled | boolean | false | Enable/disable OAuth |
|
|
|
+| Issuer URL | URL | (required) | Required. Self-discovery URL for client (from previous step) |
|
|
|
+| Client ID | string | (required) | Required. Client ID (from previous step) |
|
|
|
+| Client secret | string | (required) | Required. Client Secret (previous step) |
|
|
|
+| Scope | string | openid email profile | Full list of scopes to send with the request (space delimited) |
|
|
|
+| Button text | string | Login with OAuth | Text for the OAuth button on the web |
|
|
|
+| Auto register | boolean | true | When true, will automatically register a user the first time they sign in |
|
|
|
|
|
|
:::info
|
|
|
The Issuer URL should look something like the following, and return a valid json document.
|
|
@@ -63,4 +59,8 @@ The Issuer URL should look something like the following, and return a valid json
|
|
|
The `.well-known/openid-configuration` part of the url is optional and will be automatically added during discovery.
|
|
|
:::
|
|
|
|
|
|
+Here's an example of OAuth configured for Authentik:
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
[oidc]: https://openid.net/connect/
|