working SSO configuration with Authelia

[sir-andreas]

Dear all,

I invested some time to make SSO work with authelia, so I would like to share the final (working with web and iOS mobile access) result with you:

Authelia (docker, image tag: edge, version 2.7.0) config:

identity_providers:
  oidc:
    hmac_secret: *your_secret*
    issuer_private_key: |
      -----BEGIN RSA PRIVATE KEY-----
      ...
      -----END RSA PRIVATE KEY-----
    access_token_lifespan: 1h
    authorize_code_lifespan: 1m
    id_token_lifespan: 1h
    refresh_token_lifespan: 90m
    enable_client_debug_messages: false
    cors:
      endpoints:
        - authorization
        - token
        - revocation
        - introspection
      allowed_origins:
        - https://your.authelia.url
      allowed_origins_from_client_redirect_uris: false

    clients:
      - id: audiobookshelf
        description: audiobookshelf
        secret: *your_secret*
        authorization_policy: one_factor
        consent_mode: pre-configured
        pre_configured_consent_duration: 2w
        public: false
        redirect_uris:
          - https://your.audiobookshelf.url/auth/openid/callback
          - https://your.audiobookshelf.url/auth/openid/mobile-redirect
          - audiobookshelf://oauth
        scopes:
          - openid
          - profile
          - email