ยฉ 2026 Hedgehog Software, LLC

TwitterGitHubDiscord
More
CommunitiesDocsAboutTermsPrivacy
Search
Star
Setup for Free
ImmichI
Immichโ€ข13mo agoโ€ข
11 replies
Ouguiya

Error in OAuth discovery: Error: self-signed certificate

Hi. I hope no one asked this before - I used google and searched in here, but couldn't find much.
I recently tried to setup Authentik to act as an SSO provider for Immich (internally, in my own network). Authentik and Immich are both run through docker, but on separate VMs and subnets.
Filled out everything according to https://docs.goauthentik.io/integrations/services/immich/ and https://immich.app/docs/administration/oauth/.
When I try to login, however, I get an error message saying
Error in OAuth discovery: Error: self-signed certificate (Immich Server Error)
Error in OAuth discovery: Error: self-signed certificate (Immich Server Error)
. Since nobody else on the internet seems to be having this problem, I'm guessing it's something seriously stupid that I forgot to do or add, but for the life of me I can't figure out what. The relevant Docker log entry is:
[Nest] 16  - 01/31/2025, 8:36:41 PM   ERROR [Api:OAuthRepository~drpbutwq] Error in OAuth discovery: Error: self-signed certificate
[Nest] 16  - 01/31/2025, 8:36:41 PM   ERROR [Api:OAuthRepository~drpbutwq] Error: self-signed certificate
    at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
    at TLSSocket.emit (node:events:524:28)
    at TLSSocket._finishInit (node:_tls_wrap:1078:8)
    at ssl.onhandshakedone (node:_tls_wrap:864:12)
    at TLSWrap.callbackTrampoline (node:internal/async_hooks:130:17)
[Nest] 16  - 01/31/2025, 8:36:41 PM   ERROR [Api:OAuthRepository~drpbutwq] Error in OAuth discovery: Error: self-signed certificate
[Nest] 16  - 01/31/2025, 8:36:41 PM   ERROR [Api:OAuthRepository~drpbutwq] Error: self-signed certificate
    at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
    at TLSSocket.emit (node:events:524:28)
    at TLSSocket._finishInit (node:_tls_wrap:1078:8)
    at ssl.onhandshakedone (node:_tls_wrap:864:12)
    at TLSWrap.callbackTrampoline (node:internal/async_hooks:130:17)

Docker-compose & .env are attached. For Authentik, the docker-compose file is the default one. Configurations of both immich and authentik are attached (with just the secret removed)
QhNzWq79yt.png
GEhgPRKVlW.png
immich_docker-compose.txt3.26KB
immich_env_file.txt956B
ImmichJoin
A place to hang out, get support, discuss Immich, get announcements about releases and anything else going on.
36,590Members
Resources
Was this page helpful?

Similar Threads

Recent Announcements

Similar Threads

oAuth and Self Signed certificate issue
ImmichIImmich / help-desk-support
9mo ago
OAuth discovery error with Authentik
ImmichIImmich / help-desk-support
2mo ago
Immich app cannot connect to server with self-signed certificate
ImmichIImmich / help-desk-support
8mo ago
Unable to login with OAuth Login with OAuth Error Error in OAuth discovery: OPError: expected 200 OK
ImmichIImmich / help-desk-support
14mo ago