Unable to sign in with sso
Hi, I’m trying to login to audiobookshelf but my user identity is managed by Authentik but it doesn’t work. I get server not foubd when accessing the FQDN and user not found when using the IP address directly. It works as expected in the web ui and the native ios app.
latest version of everything.
Any thoughts?
Can you describe your setup and the unexpected behavior in more detail?
I will close this due to inactivity. Feel free to comment on this again and I will reopen this issue.
@rasmuslos I have the same issue.
I configured OIDC for audiobookshelf using the following guide: https://www.audiobookshelf.org/guides/oidc_authentication
This requires an authentik setup to be present, see https://docs.goauthentik.io/docs/installation/docker-compose
On audiobookshelf's side, it's configured as follows:
Using the Web-UI, everything works as expected: i'm redirected to my authentik instance, log in there and get redirected back to audiobookshelf and can sign in from there. Using plappa (alternative to this project), it works as well.
When entering the Server-URL in ShelfPlayer and clicking on "Next", it says "Login failed".
Is this enough information to reopen the issue?
@rasmuslos I have the exact same issue. OIDC login seems to be broken in ShelfPlayer.
I forgot to respond but you forgot to add the shelfplayer://callback URL to the allow list. It says you should do so when you are promoted to select a authentication method and the callback is missing in the screenshot.
I forgot to respond but you forgot to add the
shelfplayer://callbackURL to the allow list. It says you should do so when you are promoted to select a authentication method and the callback is missing in the screenshot.
Thanks, I actually figured that out in the exact moment you replied.
For anyone else trying this: You have to add shelfplayer://callback (or plappa://oauth) in ABS.
Also, in your OIDC server, you have to add another redirect URL: https://abs.domain/auth/openid/callback AND https://abs.domain/auth/openid/mobile-redirect
Thanks, that works for me as well :)