OIDC Configuration
How to configure OIDC for Postiz
Warning: With the actual implementation of the OIDC provider, GitHub / Google login provider will be disabled.
If you want to use OAuth/OIDC, please follow the instructions below.
We will use Authentik as an OIDC provider example, with base URL https://authentik.example.com
Create an Application/Provider on the Authentik side
You will find the following important information:
redirect_uri=>https://postiz.yourserver.com/settingsclient_id=>randomclientidclient_secret=>randomclientsecretauth_url=>https://authentik.example.com/application/o/authorizetoken_url=>https://authentik.example.com/application/o/tokenuserinfo_url=>https://authentik.example.com/application/o/userinfo
The same information needs to be configured on other OIDC providers such as Keycloak, Dex, etc.
Configure POSTIZ_GENERIC_OAUTH
POSTIZ_GENERIC_OAUTH="true"Set to true to enable OIDC login.
Configure display name
NEXT_PUBLIC_POSTIZ_OAUTH_DISPLAY_NAME="Authentik"Will display the name of the OIDC provider on the login page.
Configure logo URL
NEXT_PUBLIC_POSTIZ_OAUTH_LOGO_URL="https://raw.githubusercontent.com/walkxcode/dashboard-icons/master/png/authentik.png"Will display the logo of the OIDC provider on the login page button.
Configure POSTIZ_OAUTH_URL
POSTIZ_OAUTH_URL="https://authentik.example.com"The base URL of the OIDC provider.
Configure POSTIZ_OAUTH_AUTH_URL
POSTIZ_OAUTH_AUTH_URL="https://authentik.example.com/application/o/authorize/"The authorization URL of the OIDC provider.
Configure POSTIZ_OAUTH_TOKEN_URL
POSTIZ_OAUTH_TOKEN_URL="https://authentik.example.com/application/o/token/"The token URL of the OIDC provider.
Configure POSTIZ_OAUTH_USERINFO_URL
POSTIZ_OAUTH_USERINFO_URL="https://authentik.example.com/application/o/userinfo/"The userinfo URL of the OIDC provider.
Configure POSTIZ_OAUTH_CLIENT_ID
POSTIZ_OAUTH_CLIENT_ID="randomclientid"The client ID of the OIDC provider.
Configure POSTIZ_OAUTH_CLIENT_SECRET
POSTIZ_OAUTH_CLIENT_SECRET="randomclientsecret"The client secret of the OIDC provider.