OAuth with Google - Mobile-redirect error
I'm following this youtube video on setup and got to the end and getting an error around the mobile redirect url
https://www.youtube.com/watch?v=Bu8WFh1ns4c&t=156s
As per image I have set the mobile redirect url in Cloudflare and within Immich
I get the portal with the cloudflare doamin url and option to oauth but then get this redirect url error
Unsure how to resolve - I have tried the local IP with the redirect url and get an errro saying the address wasn't understood
Thomas Wilde
YouTube
Self Hosting Immich (G-Photos Replacement) is getting SLICK
In this video, I demonstrate how to set up Immich from scratch on a linux server, set up a cloudflare tunnel to expose the application to the web, and set up OAuth using CloudFlare Zero Trust and Google OAuth.
Immich is an incredible self-hosted free and open source solution to replacing Google photos and allows you to utilize the physical st...
Immich is an incredible self-hosted free and open source solution to replacing Google photos and allows you to utilize the physical st...
16 Replies
:wave: Hey @Mordrin,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJAChecklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like
fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.GitHub
immich-app immich · Discussions
Explore the GitHub Discussions forum for immich-app immich. Discuss code, ask questions & collaborate with the developer community.
FAQ | Immich
User
GitHub
Issues · immich-app/immich
High performance self-hosted photo and video management solution. - Issues · immich-app/immich
Successfully submitted, a tag has been added to inform contributors. :white_check_mark:
We see that YouTube tutorials are often outdated or wrong. Have you looked at our oauth docs as well?
I don't believe it's outdated the video was uploaded only a month ago
https://immich.app/docs/administration/oauth/ - I've read through the doco here and it's got a different config for the redirect url but I'm not sure how it's meant to be implemented.
But it seems I'm missing app.immich:///oauth-callback
But when trying to add into Cloudflare or immich it's obviously not a valid URL
It's a valid URL but some providers don't like that, which is why there's the redirect alternative
When you get those errors in your browser, what's the URL it's actually trying to send you to?
https://MYDOMAIN.cloudflareaccess.com/cdn-cgi/access/sso/oidc/c0b16e75686f4f1c4f0b01547c13bdf1f38a5f244359f66096540a171dac44f5/authorization?client_id=c0b16e75686f4f1c4f0b01547c13bdf1f38a5f244359f66096540a171dac44f5&scope=openid%20email%20profile&response_type=code&redirect_uri=https%3A%2F%2Fimmich.MYDOMAIN.com%2Fauth%2Flogin&state=g-yYFDiodwbhz_xXrDspD5zQb5XMdpUB_9jVJb6BUf8
I think it's the google redirect urls I need to add
I've updated google web app and added url 2-3-4, 5 is thinking it's a dupe and or not a url
Just to clarify; Do you have a cloudflare authentication page in front of Immich, so before you get to Immich's own login page?
Nope - it just loads the immich login page with oauth as the only option
And you have both google and cloudflare involved in the oauth?
I don't entirely understand the setup here
Yea same - but cloudflare sends the traffic to google oauth and the redirect urls need to be in cloudflare, google and immich
Maybe I'm just not familiar with how cloudflare does oauth but that sounds strange to me
FWIW my set up has been working for weeks, but this morning after an update I am experiencing similar login issues with no other changes
Getting the same url redirect errors on oauth login?
Yes, very similar. But I am also having another issue where the
immich_server container is restarting constantly so it might be related to that issue
To give an update, I ended up restoring a previous database from a few days ago and the issue resolved. In my case, the OAuth issue seemed to have been related to a corrupt database