OAuth Mobile with Authelia

[balmy escarp]

Hello everyone! Let me start by thanking everyone involved for this great app!

I am configuring OAuth authentication with Authelia serving as a oidc server. On the web part everything is working great! I tried to follow the instructions for the Mobile Redirect URI as I understand that authelia only allows HTTP and HTTPS. However, it is not working. I think I am missing a step but I found the instructions a bit unclear. I believe the problem might be in the first step as I am unsure how to "configure an http(s) endpoint to forwards requests to app.immich:/" (i.e. if this needs to be configured in my reverse proxy, Traefik) Would be great if someone could help! Thank you in advance.

Sending the Oauth settings and authelia config too:

[rapid smelt]

@gusty raven If I recall correctly, you also use Authelia, correct? Do you have any advises?

[rugged rivet]

For my setup I don't use the override. In your authelia config set one of your redirects to app.immich:/

I don't use the mobile redirect one

That's all I needed

[gusty raven]

redirect_uris:
  - app.immich:/

in authelia config works fine with the app

[balmy escarp]

I tried that but I am getting a 401 error when inputting the server url

[gusty raven]

disable MOBILE REDIRECT URI OVERRIDE in immich settings

[rugged rivet]

You have
auth/login
User-settings
app.immich:/

As the three redirects?

[balmy escarp]

Yes

This is what shows up on my iPad

[balmy escarp]

Also just tried to update the server and clients and it's still the same

[gusty raven]

this works fine for me. maybe your reverse proxy is doing something weird.. but OIDC works fine on the web?

[balmy escarp]

For me it's still showing the same error, but it's working in the web. What proxy are you using? Also, when you write your server endpoint in the Immich app does a popup come up so you can write your authelia credentials?