bobban/sloth-manager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sso fixed

Browse Source
This commit is contained in:
bobban
2026-09-04 23:19:40 +02:00
parent 1aa64c93ae
commit 507d9e3cfe
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/routes/oidc.js
+5 -2
View File
@@ -2,7 +2,8 @@
* Authentik OIDC SSO routes
*
* Requires env:
* AUTHENTIK_URL Base URL of your Authentik instance, e.g. https://auth.example.com
* AUTHENTIK_URL Issuer URL of your Authentik application, e.g.
* https://auth.example.com/application/o/sloth-manager
* AUTHENTIK_CLIENT_ID OAuth2 application client ID
* AUTHENTIK_CLIENT_SECRET OAuth2 application client secret
*
@@ -26,7 +27,9 @@ async function getDiscovery() {
if (_discovery && Date.now() - _discoveryTime < DISCOVERY_TTL_MS) return _discovery;
const base = (process.env.AUTHENTIK_URL || '').replace(/\/$/, '');
if (!base) throw new Error('AUTHENTIK_URL is not configured');
const res = await fetch(`${base}/application/o/.well-known/openid-configuration`);
// AUTHENTIK_URL is the issuer URL, e.g. https://auth.example.com/application/o/sloth-manager
// Authentik discovery doc lives at <issuer>/.well-known/openid-configuration
const res = await fetch(`${base}/.well-known/openid-configuration`);
if (!res.ok) throw new Error(`Authentik discovery fetch failed: HTTP ${res.status}`);
_discovery = await res.json();
_discoveryTime = Date.now();