#Oauth Immich with Authentik

1 messages · Page 1 of 1 (latest)

frank bough
#

Hi everyone
I am trying to setup Authentik Oauth with Immich.
Everything works fine when I put in the ISSUER URL the local IP address of my authentik issuer. (see screenshot1) **
But when I put my domain name accessible from outside it doesn't work anymore : I get the error
"Unable to complete OAuth login"** (see screenshot)
Of course my domain name auth.domaine.com is accessible from outside. I am using Nginx Proxy Manager (screen)

Thanks in advance for your help

#

Here is the logs of immich-server

rancid vortex
#

Are they both running on the same server? Immich can't reach authentik by its external ip

frank bough
#

Unraid user here
Yes they are both on the same server. Using 2 different network with Immich compose stack

rancid vortex
#

And is 213.etc the ip of the unraid server?

#

Or of your router?

frank bough
#

I have no idea what is 213.x ip address

#

Can it be OVH ip address? (where I bought my domain name)

pure shadow
#

It is probably your public ip

#

The OAuth issuer url and server needs to be reachable from the client (web or mobile app) and the immich-server container. It sounds like you can't get both to work at the same time.

#

Can you login with your phone using mobile data (no wifi) when the issuer url is set to your hostname not IP?

frank bough
pure shadow
#

Oh right that's still accessing locally from the container

#

How does your web session resolve the hostname for the auth server?

#

What is different about that vs the container

frank bough
astral schooner
#

Do you use Authentik for other purposes? So that you know it works.

Can you try to replace the port-settings in NPM to https and port 9443 for Authentik?

frank bough
frank bough
astral schooner
#

I think you have connection issues between the Immich network and "blancnet" that Authentik is in.
I will test some more on my Unraid server in a few hours if that helps 👍