Skip to content

Commit

Permalink
docs: Update Authentik example (#9950)
Browse files Browse the repository at this point in the history
* Update

* npm run format:fix

* more npm run format:fix
  • Loading branch information
aviv926 committed Jun 3, 2024
1 parent bb9e182 commit 15474e8
Show file tree
Hide file tree
Showing 6 changed files with 29 additions and 3 deletions.
Binary file not shown.
Binary file not shown.
Binary file removed docs/docs/administration/img/oauth-settings.png
Binary file not shown.
28 changes: 25 additions & 3 deletions docs/docs/administration/oauth.md
Original file line number Diff line number Diff line change
Expand Up @@ -117,7 +117,27 @@ Immich has a route (`/api/oauth/mobile-redirect`) that is already configured to

Here's an example of OAuth configured for Authentik:

<img src={require('./img/oauth-settings.png').default} title="OAuth settings" />
Configuration of Authorised redirect URIs (Authentik OAuth2/OpenID Provider)

<img src={require('./img/authentik-redirect-uris-example.webp').default} width='70%' title="Authentik authorised redirect URIs" />

Configuration of OAuth in Immich System Settings

| Setting | Value |
| ---------------------------- | ---------------------------------------------------------------------------------- |
| Issuer URL | `https://example.immich.app/application/o/immich/.well-known/openid-configuration` |
| Client ID | AFCj2rM1f4rps**\*\*\*\***\***\*\*\*\***lCLEum6hH9... |
| Client Secret | 0v89FXkQOWO\***\*\*\*\*\***\*\*\***\*\*\*\*\***mprbvXD549HH6s1iw... |
| Scope | openid email profile |
| Signing Algorithm | RS256 |
| Storage Label Claim | preferred_username |
| Storage Quota Claim | immich_quota |
| Default Storage Quota (GiB) | 0 (0 for unlimited quota) |
| Button Text | Sign in with Authentik (optional) |
| Auto Register | Enabled (optional) |
| Auto Launch | Enabled (optional) |
| Mobile Redirect URI Override | Disable |
| Mobile Redirect URI | |

</details>

Expand All @@ -126,11 +146,13 @@ Here's an example of OAuth configured for Authentik:

### Google Example

Here's an example of OAuth configured for Google:

Configuration of Authorised redirect URIs (Google Console)

<img src={require('./img/google-example.webp').default} width='50%' title="Authorised redirect URIs" />
<img src={require('./img/google-redirect-uris-example.webp').default} width='50%' title="Google authorised redirect URIs" />

Configuration of OAuth in System Settings
Configuration of OAuth in Immich System Settings

| Setting | Value |
| ---------------------------- | ------------------------------------------------------------------------------------------------------ |
Expand Down
4 changes: 4 additions & 0 deletions docs/src/css/custom.css
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,10 @@ button {
font-family: 'Overpass', sans-serif;
}

img {
border-radius: 15px;
}

/* You can override the default Infima variables here. */
:root {
--ifm-color-primary: #4250af;
Expand Down

0 comments on commit 15474e8

Please sign in to comment.