Not seeing OIDC option

[ikolsteren]

I just started using this tracker and finally got deployed using docker on my Synology NAS
Not sure if I have everything configured correct to begin with. I don't have a volume mapped for RYOT itself and all my config is in the environment portion of the docker compose. It has been working and I have my two user setup and everything is maintained after a rebuild etc.
I added the OIDC portion last night to work with my Authentik server but not seeing the option when I log in

  version: "3.9"
  
  services:
    ryot-db:
      image: postgres:16-alpine
      restart: unless-stopped
      volumes:
        - /volume1/docker/ryot/database:/var/lib/postgresql/data
      environment:
        - POSTGRES_PASSWORD=password
        - POSTGRES_USER=postgres
        - POSTGRES_DB=postgres
      container_name: ryot-db
  
    ryot:
      image: "ghcr.io/ignisda/ryot:latest"
  #    volumes:
  #      - /volume1/docker/ryot/config:/home/ryot
      environment:
        - DATABASE_URL=postgres://postgres:password@ryot-db:5432/postgres
        - FRONTEND_URL="https://ryot.url"
        - SERVER_OAUTH_CLIENT_ID="IDfromAuthentik"
        - SERVER_OAUTH_CLIENT_SECRET="mysecretfromAuthentik"
        - SERVER_OAUTH_ISSUER_URL="https://authentik.mydomain"
      ports:
        - "7777:8000"
      pull_policy: always
      container_name: ryot
    
  volumes:
    postgres_storage:

[IgnisDa]

I have mispelled the names of the env vars. Will update docs. https://github.com/IgnisDa/ryot/pull/757/files#diff-46d2b1aaba2c3965b283852254a08b3e2497947aed2300dc50a0f6dc5331fa83L8-L10

Thanks for letting me know.

[ikolsteren]

Changed the three lines to read OIDC vs OAUTH and still no go

[ikolsteren]

Seeing this in the logs - looks like its partly there - redirect URL is in Authentik and also tried a wild card - no OIDC button on the login page though

[IgnisDa]

Did you restart the server?

Please show me the redacted variable names (sanity check).

[ikolsteren]

This run I am trying without quotes on anything
After each change I delete the old container and pull in everything new

Still the 200 erros - assuming from Authentik - can seem to see more details on the URL etc

    environment:
      - TZ=America/Toronto
      - DATABASE_URL=postgres://working
      - FRONTEND_URL=https://ryot.domain
      - SERVER_OIDC_CLIENT_ID=help_me
      - SERVER_OIDC_CLIENT_SECRET=great_work
      - SERVER_OIDC_ISSUER_URL=https://authentik.domain

[IgnisDa]

Does this endpoint exist? https://authentik/.well-known/openid-configuration"

[ikolsteren]

Ok got it -
No quotes around anything and changed to the proper issuer URL with the trailing back slash
I wasn't including the path to get to the .well known /application/o/ryot/
Thank you

[IgnisDa]

Does the authentication work now?

What was the problem and how did you fix it?

[ikolsteren]

Yes all working
Chaneged
SERVER_OIDC_ISSUER_URL=https://authentik.domain
to
SERVER_OIDC_ISSUER_URL=https://authentik.domain/application/o/ryot/
Migrated my users using your guide as well

[IgnisDa]

@ikolsteren Someone else is having the same problem. Which version of authentik are you running?