OAuth fails with invalid_client

I'm working on getting OAuth configured using Authentik. I've followed the setup instructions from both Immich and Authentik and they seem to agree on how to set things up. I've configured Immich via a config file and populated the oauth fields there. When I go to sign in via Authentik I get the following errors in each system:
Immich:

OPError: invalid_client (Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method))

OPError: invalid_client (Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method))

Authentik:

{"auth_via": "oauth_client_secret", "client_id": "immich-test", "domain_url": "auth.jacob-williams.me", "event": "Invalid client secret", "host": "auth.jacob-williams.me", "level": "warning", "logger": "authentik.providers.oauth2.views.token", "pid": 18827, "request_id": "bc2fb09dbf464caaa3bb06f069df2694", "schema_name": "public", "timestamp": "2025-01-06T15:45:01.888016"}

{"auth_via": "oauth_client_secret", "client_id": "immich-test", "domain_url": "auth.jacob-williams.me", "event": "Invalid client secret", "host": "auth.jacob-williams.me", "level": "warning", "logger": "authentik.providers.oauth2.views.token", "pid": 18827, "request_id": "bc2fb09dbf464caaa3bb06f069df2694", "schema_name": "public", "timestamp": "2025-01-06T15:45:01.888016"}

This tells me that something is wrong with the client secret that is shared between the two systems, however when I checked they are the same (synced via 1Password). At this point, I'm a bit lost as where to go next or what is going on with my configuration.

Note: I do have two instances of immich-server running, one configured via GUI, and the other via config file. They otherwise share all the same resources and services.

Configuration for everything can be found here: https://github.com/NovaMachina/home-ops/tree/main/kubernetes/apps/default/immich-test

OAuth fails with invalid_client

OPError: invalid_client (Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method))

OPError: invalid_client (Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method))

Authentik:

{"auth_via": "oauth_client_secret", "client_id": "immich-test", "domain_url": "auth.jacob-williams.me", "event": "Invalid client secret", "host": "auth.jacob-williams.me", "level": "warning", "logger": "authentik.providers.oauth2.views.token", "pid": 18827, "request_id": "bc2fb09dbf464caaa3bb06f069df2694", "schema_name": "public", "timestamp": "2025-01-06T15:45:01.888016"}

{"auth_via": "oauth_client_secret", "client_id": "immich-test", "domain_url": "auth.jacob-williams.me", "event": "Invalid client secret", "host": "auth.jacob-williams.me", "level": "warning", "logger": "authentik.providers.oauth2.views.token", "pid": 18827, "request_id": "bc2fb09dbf464caaa3bb06f069df2694", "schema_name": "public", "timestamp": "2025-01-06T15:45:01.888016"}

OAuth fails with invalid_client

Similar Threads

OAuth fails with invalid_client

Similar Threads

Similar Threads

Similar Threads