f24519787b
Added new documentation style, added Authentik & Authelia examples. THank you Hendrik & Ivan! --------- Co-authored-by: Hendrik Sievers <89412959+hendrik1120@users.noreply.github.com> Co-authored-by: Ivan Vasquez <ivanvasquezp@outlook.com>
69 lines
2.0 KiB
Markdown
69 lines
2.0 KiB
Markdown
# Authelia
|
|
|
|
## Public client configuration
|
|
|
|
> [!NOTE]
|
|
> This configuration strictly requires a HTTPS redirect uri.
|
|
|
|
Authelia `configuration.yml`
|
|
```yaml
|
|
identity_providers:
|
|
oidc:
|
|
## The other portions of the mandatory OpenID Connect 1.0 configuration go here.
|
|
## See: https://www.authelia.com/c/oidc
|
|
clients:
|
|
- client_id: 'homeassistant'
|
|
client_name: 'Home Assistant'
|
|
public: true
|
|
require_pkce: true
|
|
pkce_challenge_method: 'S256'
|
|
authorization_policy: 'two_factor'
|
|
redirect_uris:
|
|
- 'https://hass.example.com/auth/oidc/callback'
|
|
scopes:
|
|
- 'openid'
|
|
- 'profile'
|
|
- 'groups'
|
|
userinfo_signed_response_alg: 'RS256'
|
|
```
|
|
|
|
Home Assistant `configuration.yaml`
|
|
```yaml
|
|
auth_oidc:
|
|
client_id: "homeassistant"
|
|
discovery_url: "https://auth.example.com/.well-known/openid-configuration"
|
|
```
|
|
|
|
## Confidential client configuration:
|
|
|
|
Authelia `configuration.yml`
|
|
```yaml
|
|
identity_providers:
|
|
oidc:
|
|
## The other portions of the mandatory OpenID Connect 1.0 configuration go here.
|
|
## See: https://www.authelia.com/c/oidc
|
|
clients:
|
|
- client_id: 'homeassistant'
|
|
client_name: 'Home Assistant'
|
|
client_secret: '$pbkdf2-sha512$310000$c8p78n7pUMln0jzvd4aK4Q$JNRBzwAo0ek5qKn50cFzzvE9RXV88h1wJn5KGiHrD0YKtZaR/nCb2CJPOsKaPK0hjf.9yHxzQGZziziccp6Yng' # The digest of 'insecure_secret'.
|
|
public: false
|
|
require_pkce: true
|
|
pkce_challenge_method: 'S256'
|
|
authorization_policy: 'two_factor'
|
|
redirect_uris:
|
|
- 'https://hass.example.com/auth/oidc/callback'
|
|
scopes:
|
|
- 'openid'
|
|
- 'profile'
|
|
- 'groups'
|
|
userinfo_signed_response_alg: 'RS256'
|
|
token_endpoint_auth_method: 'client_secret_post'
|
|
```
|
|
|
|
Home Assistant `configuration.yaml`
|
|
```yaml
|
|
auth_oidc:
|
|
client_id: "homeassistant"
|
|
client_secret: "insecure_secret"
|
|
discovery_url: "https://auth.example.com/.well-known/openid-configuration"
|
|
``` |