Skip to content

Latest commit

 

History

History
46 lines (32 loc) · 1.58 KB

README.md

File metadata and controls

46 lines (32 loc) · 1.58 KB
Raw

ZITADEL OpenID Authentication Apache

For now, this is just a basic example. Needs some more love and review.

Configure

Setup PKCE client in ZITADEL

  • Go to your organization and setup a new application with the type PKCE
  • When created go to the "Redirect Settings" and enable Development Mode
  • Add the Redirect Uri http://localhost:8080/secure/callback
  • Add the Post Logout Uri http://localhost:8080/index.html Configuration Redirect Settings

You can find the url to your discovery endpoint under "URLs": Discovery Endpoint

Configure Apache2

  1. Rename example.auth_openidc-httpd.conf to auth_openidc-httpd.conf
  2. Update the values in auth_openidc-httpd.conf with values from ZITADEL.

auth_openidc-httpd.conf

OIDCProviderMetadataURL https://<your_domain>.zitadel.cloud/.well-known/openid-configuration
OIDCClientID <client_id, eg 227791....@apache_test>
# OIDCRedirectURI is a vanity URL that must point to a path protected by this module but must NOT point to any content
OIDCRedirectURI <redirect_uri, eg http://localhost:8080/secure/callback>
OIDCCryptoPassphrase <very-secure-phrase>

How to run

docker build -t my-apache2 .
docker run -dit --name my-running-app -p 8080:80 my-apache2

Open your browser and click on the link to the secure route.

References