diff --git a/pages/docs/configuration/authentication/OAuth2-OIDC/authelia.mdx b/pages/docs/configuration/authentication/OAuth2-OIDC/authelia.mdx index 1d031ecb..17f7a06b 100644 --- a/pages/docs/configuration/authentication/OAuth2-OIDC/authelia.mdx +++ b/pages/docs/configuration/authentication/OAuth2-OIDC/authelia.mdx @@ -7,22 +7,22 @@ description: Learn how to configure LibreChat to use Authelia for user authentic - Generate a client secret using: ``` - docker run authelia/authelia:latest authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72 --random.charset rfc3986 + docker run --rm authelia/authelia:latest authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72 --random.charset rfc3986 ``` - Then in your `configuration.yml` add the following in the oidc section: ```bash filename="configuration.yml" - - id: librechat - description: LibreChat - secret: '$pbkdf2-GENERATED_SECRET_KEY_HERE' + - client_id: 'librechat' + client_name: 'LibreChat' + client_secret: '$pbkdf2-GENERATED_SECRET_KEY_HERE' public: false - authorization_policy: two_factor + authorization_policy: 'two_factor' redirect_uris: - 'https://LIBRECHAT.URL/oauth/openid/callback' scopes: - - openid - - profile - - email - userinfo_signing_algorithm: none + - 'openid' + - 'profile' + - 'email' + userinfo_signing_algorithm: 'none' ``` - Then restart Authelia @@ -32,13 +32,13 @@ description: Learn how to configure LibreChat to use Authelia for user authentic ```bash filename=".env" ALLOW_SOCIAL_LOGIN=true OPENID_BUTTON_LABEL='Log in with Authelia' - OPENID_ISSUER=https://auth.example.com + OPENID_ISSUER=https://auth.example.com/.well-known/openid-configuration OPENID_CLIENT_ID=librechat OPENID_CLIENT_SECRET=ACTUAL_GENERATED_SECRET_HERE OPENID_SESSION_SECRET=ANY_RANDOM_STRING - OPENID_CALLBACK_URL=https://auth.example.com/api/oidc/authorization + OPENID_CALLBACK_URL=/oauth/openid/callback OPENID_SCOPE="openid profile email" - + OPENID_IMAGE_URL=https://www.authelia.com/images/branding/logo-cropped.png # Optional: redirects the user to the end session endpoint after logging out OPENID_USE_END_SESSION_ENDPOINT=true ```