Read OIDC_RP_CLIENT_ID from a secret file #14

Closed
opened 2026-10-25 16:55:34 +00:00 by Gilles · 0 comments
Owner

SSO login is broken in prod: /oidc/authenticate/ returns 404.

The repo's deploy/docker-compose.yml has OIDC_RP_CLIENT_ID: ""; the real value only lived in the server's copy. Copying the new compose file for #9 (as its PR asked) wiped it, so HAS_OIDC is false and the /oidc/ routes are not mounted.

Fix: read OIDC_RP_CLIENT_ID through _secret() like the other settings, so the compose file only points at secrets/thierryadeOidcClientId (OIDC_RP_CLIENT_ID_FILE) and copying it again can't lose the value. Also refresh the SSO part of deploy/README.md, which still says the Authentik blueprint isn't written.

🤖 Generated with Claude Code

https://claude.ai/code/session_014BSmBtGWeFBD9z4mYm9SjA

SSO login is broken in prod: `/oidc/authenticate/` returns 404. The repo's `deploy/docker-compose.yml` has `OIDC_RP_CLIENT_ID: ""`; the real value only lived in the server's copy. Copying the new compose file for #9 (as its PR asked) wiped it, so `HAS_OIDC` is false and the `/oidc/` routes are not mounted. Fix: read `OIDC_RP_CLIENT_ID` through `_secret()` like the other settings, so the compose file only points at `secrets/thierryadeOidcClientId` (`OIDC_RP_CLIENT_ID_FILE`) and copying it again can't lose the value. Also refresh the SSO part of `deploy/README.md`, which still says the Authentik blueprint isn't written. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_014BSmBtGWeFBD9z4mYm9SjA
Sign in to join this conversation.
No description provided.