Does any one have a working sample with Authelia?

[Splinter7914]

I have Authelia working as oidc for other apps and using forward auth with traefik as well. Using v0.17.0 of the plugin.

Running into an issue where I see the call being redirected to authelia for OIDC and getting the consent form for the appropriate client. When I accept it then I get a 404. Its calling url https://traefik.example.com/oidc/callback?code=authelia_ac...

My plugin config is

authelia-oidc:
      plugin:
        oidc:
          Secret: {{ env "TFK_OIDC_SECRET" | quote }}
          CallbackUri: "https://traefik.{{ $domain }}/oidc/callback"
          Provider:
            Url: "https://authelia.{{ $domain }}"
            ClientId: "traefik"
            ClientSecret: {{ env "TFK_OIDC_CLIENT_SECRET" | quote }}
          Scopes: ["openid", "profile", "email"]

and my Authelia client configs are the following. For these I looked at my other examples and followed similar policy.

- client_name: 'traefik'
        client_id: 'traefik'
        client_secret: '{{ secret "/secrets/oidc/traefik.secret" }}'
        public: false
        authorization_policy: 'traefik'
        redirect_uris:
          - 'https://traefik.{{ env "MY_DOMAIN" }}/oidc/callback'
          - 'https://traefik.pi.{{ env "MY_DOMAIN" }}/oidc/callback'
        scopes:
          - 'openid'
          - 'email'
          - 'profile'
        userinfo_signed_response_alg: 'none'
        token_endpoint_auth_method: 'client_secret_basic'
        #token_endpoint_auth_method: 'client_secret_post'

I am not seeing any specific errors in traefik service and access logs. Any pointers on what this could be?

[Splinter7914]

I got it working, I understood the workflow wrong. I was assuming I could create one client and then use oidc for any number of services I have running inside.

I can get it working if I use this only for the app being served by https://traefik.{{ env "MY_DOMAIN" }}

If that is expected then this is a pebkac issue :).

I was trying to use this to redirect to https://another-app{{ env "MY_DOMAIN" }}