VoidAuth
OIDC in Portainer #69
-
|
Hey. I'm trying to set up Portainer as an OIDC client but I'm not really succeeding. When I try to log in, I get an "Unauthorized" error. I believe the problem is the "Resource URL", described by portainer as "URL used by Portainer to retrieve information about the authenticated user". In Authelia I've found the url to be "your-auth-domain.com/api/oidc/userinfo" but I haven't been able to find an equivalent endpoint in voidauth. More info about the portainer OAuth setup can be found here: https://docs.portainer.io/admin/settings/authentication/oauth#custom I've set the Authorization URL to |
Beta Was this translation helpful? Give feedback.
Replies: 4 comments 1 reply
-
|
Sup! |
Beta Was this translation helpful? Give feedback.
-
|
I gave it a try but got the same error. After finding the relevant logs, I found a 404 error but it didn't mention which url is returning the 404. Upon trying the relevant urls, voidauth.example.com/oidc/token is in fact returning a "404 - Not Found". 
Perhaps that's the actual issue. Surely the /oidc/token uri shouldn't be returning a 404, even if I'm just sending a simple get-request without proper headers? |
Beta Was this translation helpful? Give feedback.
-
|
Ahh interesting, /token is a POST endpoint, not a GET, so that is why it is returning a 404. Make sure you have the setup correct in the Portainer GUI, I will look into Portainer setup as well |
Beta Was this translation helpful? Give feedback.
-
|
I was able to get Portainer working with VoidAuth, their instructions for setup don't quite work. Here are some screenshots of what works for me: In Portainer: preferred_username for the User Identifier; spaces between the scopes, not commas; Auth Style should be In Params. don't mind the custom logo on my instance 🙈 |
Beta Was this translation helpful? Give feedback.
-
|
Yup there we go, now it works! :) Thanks for the help |
Beta Was this translation helpful? Give feedback.
I was able to get Portainer working with VoidAuth, their instructions for setup don't quite work. Here are some screenshots of what works for me:
In Portainer: preferred_username for the User Identifier; spaces between the scopes, not commas; Auth Style should be In Params.
In VoidAuth: Token Endpoint Auth Method should be client_secret_post; The Redirect URL should match exactly.
don't mind the custom logo on my instance 🙈