Can't login via OIDC with Authentik

[Volterxien]

Hi,

I've been unable to login with Authentik using native OIDC. Aurral correctly adds a new user and assigns them roles correctly based on group claims (though the username claim seems to be not working correctly -- it only ever uses the email even when I set the username claim to username).
After creating a user, it just sends me back to the login screen.

Additionally, it seems the AUTH_PROXY_ENABLED setting gets set to true somewhere because if I simply remove it or set it to false and I leave the AUTH_PROXY_HEADER value set, I can still log in via header. This is true if I remove TRUST_PROXY as well.

Edit: This line appears in the logs, even with AUTH_PROXY_ENABLED=false:

[warn] [system] AUTH_PROXY_ENABLED is on but AUTH_PROXY_TRUSTED_IPS is not set - any client that can reach this server directly can impersonate any user via the proxy identity header. Set AUTH_PROXY_TRUSTED_IPS to your reverse proxy's address to restrict this.

[Volterxien]

Updating to add that this seems to have been solved by removing the forward auth block in front of aurral.
That said, I think the AUTH_PROXY_ENABLED problem should be solved. I can create a separate ticket for that if you want.

I would also be happy to help investigate the problem with forward auth + OIDC with authentik in anyway I can

[aresthegodofwar]

Potentially resolved in PR613

[Volterxien]

I'll be happy to test once it's merged, or if you have a test image I can run

[Volterxien]

As a temporary solution, I've removed the forward auth configuration in front of Aurral, which seems to have fixed it for now at least

edit: just realized I'd already said this previously. I'm very tired today lol

[github-actions]

Aurral preview image retired

Pull request #792 was merged into main. The preview image was retired. The change will appear on nightly after that build succeeds, and linked issues stay open until a stable release includes it.

[github-actions]

Included in stable release 2.9.0

This change is included in the Aurral 2.9.0 release.

docker pull ghcr.io/lklynet/aurral:2.9.0

View the release