ShelfPlayer icon indicating copy to clipboard operation
ShelfPlayer copied to clipboard

Unable to sign in with sso

Open muppie opened this issue 1 year ago • 1 comments

Hi, I’m trying to login to audiobookshelf but my user identity is managed by Authentik but it doesn’t work. I get server not foubd when accessing the FQDN and user not found when using the IP address directly. It works as expected in the web ui and the native ios app.

latest version of everything.

Any thoughts?

muppie avatar May 14 '24 19:05 muppie

Can you describe your setup and the unexpected behavior in more detail?

rasmuslos avatar May 15 '24 21:05 rasmuslos

I will close this due to inactivity. Feel free to comment on this again and I will reopen this issue.

rasmuslos avatar May 29 '24 20:05 rasmuslos

@rasmuslos I have the same issue.

I configured OIDC for audiobookshelf using the following guide: https://www.audiobookshelf.org/guides/oidc_authentication

This requires an authentik setup to be present, see https://docs.goauthentik.io/docs/installation/docker-compose

On audiobookshelf's side, it's configured as follows: image

Using the Web-UI, everything works as expected: i'm redirected to my authentik instance, log in there and get redirected back to audiobookshelf and can sign in from there. Using plappa (alternative to this project), it works as well.

When entering the Server-URL in ShelfPlayer and clicking on "Next", it says "Login failed".

Is this enough information to reopen the issue?

pavelzw avatar Aug 04 '24 17:08 pavelzw

@rasmuslos I have the exact same issue. OIDC login seems to be broken in ShelfPlayer.

cat24max avatar Aug 31 '24 14:08 cat24max

I forgot to respond but you forgot to add the shelfplayer://callback URL to the allow list. It says you should do so when you are promoted to select a authentication method and the callback is missing in the screenshot.

rasmuslos avatar Aug 31 '24 14:08 rasmuslos

I forgot to respond but you forgot to add the shelfplayer://callback URL to the allow list. It says you should do so when you are promoted to select a authentication method and the callback is missing in the screenshot.

Thanks, I actually figured that out in the exact moment you replied.

For anyone else trying this: You have to add shelfplayer://callback (or plappa://oauth) in ABS. Also, in your OIDC server, you have to add another redirect URL: https://abs.domain/auth/openid/callback AND https://abs.domain/auth/openid/mobile-redirect

cat24max avatar Aug 31 '24 14:08 cat24max

Thanks, that works for me as well :)

pavelzw avatar Sep 01 '24 08:09 pavelzw