dretyuiop
dretyuiop
PostsComments
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
Ok I managed to solve the problem. It was indeed a configuration problem. The session.domain I put immich.example.com instead of just example.com because I didn't read the manual. Thank you to everyone who helped out.
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
No, since i didn't want to set up reverse proxy on my work machine, but i can test using domain name later. But I used domain name on my server and it didn't work before, so i doubt it will now though
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
no, when i go to the page and authenticate, it just auto redirects to the default url. I posted my config file above, maybe you can see if it is a config problem.
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
i am testing this on my work machine and using file for convenience. I used lldap when setting up on my server.
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
i just used the you_must_generate string itself as the encryption_key, since I was just testing to see if it worked and not deploying it. I can test using an actualy random string though
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
when using oauth: 
{"level":"debug","method":"POST","msg":"Mark 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.12","time":"2023-08-16T02:11:25+08:00"}
{"level":"debug","method":"POST","msg":"Successful 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.12","time":"2023-08-16T02:11:25+08:00"}
{"level":"debug","method":"GET","msg":"Authorization Request with id 'c68241bb-d3c1-4c3e-9e25-d259031a89e3' on client with id 'immich' is being processed","path":"/api/oidc/authorization","remote_ip":"10.89.1.12","time":"2023-08-16T02:11:26+08:00"}
{"level":"debug","method":"POST","msg":"Mark 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.12","time":"2023-08-16T02:11:25+08:00"}
{"level":"debug","method":"POST","msg":"Successful 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.12","time":"2023-08-16T02:11:25+08:00"}
{"level":"debug","method":"GET","msg":"Authorization Request with id 'c68241bb-d3c1-4c3e-9e25-d259031a89e3' on client with id 'immich' is being processed","path":"/api/oidc/authorization","remote_ip":"10.89.1.12","time":"2023-08-16T02:11:26+08:00"}
when going directly to authelia: 
{"level":"debug","method":"POST","msg":"Mark 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.2","time":"2023-08-16T14:21:33+08:00"}
{"level":"debug","method":"POST","msg":"Successful 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.2","time":"2023-08-16T14:21:33+08:00"}
{"level":"debug","method":"POST","msg":"Mark 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.2","time":"2023-08-16T14:21:33+08:00"}
{"level":"debug","method":"POST","msg":"Successful 1FA authentication attempt made by user 'authelia'","path":"/api/firstfactor","remote_ip":"10.89.1.2","time":"2023-08-16T14:21:33+08:00"}
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
yes
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
Sure, here is the config file. Maybe you guys can try it out and see if it is a authelia configuration problem
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
Isn't the only thing needed to setup authelia the config file? I did use the authelia docs to write the config file and even just copied it from someone who got oidc working, still no luck.
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
btw what authelia version are you guys using?
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
no cookies
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
I just get redirected to the default_redirection_url once i authenticate in authelia. You guys don't get redirected?
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
i am not sure what that page is, so i am just assuming it is the oauth page
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
if u mean the oauth, then no it doesn't work for me
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
yeah i can go to the default redirect url in authelia
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
It still doesn't work. Thanks anyways though
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
i logged in, thats why it breifly flickered and redirect back to authelia login page. If the credentials were wrong, it would have a red popup saying the credentials were wrong.
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
Copying your oidc section didnt work. Could you share your whole config file (with secrets removed) ?
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
If by log in to authelia, you mean if it will redirect me to the default url with the credentials, then yes it did.
90 replies
IImmich
Created by dretyuiop on 8/13/2023 in #help-desk-support
Authelia login page redirect loop with OIDC/Oauth setup
i changed the the immich_proxy ports to 8080:8080 and the port in authelia conf file to 8080, still the same situation. The 192.168.1.7 is ip for both immich_server and immich_proxy, because its the host ip
90 replies