OIDC Auth with Authelia worked with v2.0.0 but is broken with v2.1.0

[joomlafab]

Description

I could successfully setup and use Authelia with Homepage v2.0.0. After pulling v2.1.0, I cannot log in since the "Login required" screen does not display the "Sign in" button anymore. On browsers where I'm already logged in, I still can access, but otherwise, there is no way to log in. I pulled again v2.0.0 and it worked again.

homepage version

v2.1.0

Installation method

Docker

Configuration

## Homepage config

[docker-compose.yml]

services:
  homepage:
    image: ghcr.io/gethomepage/homepage:v2.1.0

    container_name: homepage

    expose:
      - "3000"

    networks:
      - proxy_homepage

    volumes:
      - /opt/docker/homepage/config:/app/config
      - /opt/docker/homepage/icons:/app/public/icons
      - /var/run/docker.sock:/var/run/docker.sock:ro 

    env_file:
      - .env

    restart: unless-stopped

    extra_hosts:
      - "authelia.mydomain.com:192.168.x.y"

networks:
  proxy_homepage:
    external: true

[.env]

LOG_LEVEL=debug
TZ=Etc/Greenwich
HOMEPAGE_ALLOWED_HOSTS=homepage.mydomain.com
HOMEPAGE_AUTH_ENABLED=true
HOMEPAGE_AUTH_SECRET=***********************
HOMEPAGE_EXTERNAL_URL=https://homepage.mydomain.com
HOMEPAGE_OIDC_ISSUER=https://authelia.mydomain.com
HOMEPAGE_OIDC_CLIENT_ID=homepage
HOMEPAGE_OIDC_CLIENT_SECRET=*****************************
HOMEPAGE_OIDC_NAME=Authelia
HOMEPAGE_OIDC_SCOPE=openid email profile groups

## Authelia config

identity_providers:
  oidc:
    hmac_secret: {{ secret "/run/secrets/authelia_oidc_hmac" }}

    jwks:
      - key_id: authelia
        algorithm: RS256
        use: sig
        key: |
          {{ secret "/run/secrets/authelia_oidc_key" | nindent 10 }}

    enable_client_debug_messages: false
      - client_id: 'homepage'
        client_name: 'Homepage'
        client_secret: {{ secret "/run/secrets/homepage_local_client_secret" }}
        public: false
        authorization_policy: 'two_factor'
        require_pkce: false
        pkce_challenge_method: ''
        redirect_uris:
          - 'https://homepage.mydomain.com/api/auth/callback/homepage-oidc'
        scopes:
          - 'openid'
          - 'profile'
          - 'groups'
          - 'email'
        response_types:
          - 'code'
        grant_types:
          - 'authorization_code'
        access_token_signed_response_alg: 'none'
        userinfo_signed_response_alg: 'none'
        token_endpoint_auth_method: 'client_secret_basic'

Container Logs

Homepage logs (during trying to open homepage)

docker compose logs -f

homepage | Skipping ownership changes for /app/config
homepage | Skipping ownership changes for /app/config/logs
homepage | /app/.next already owned by correct UID/GID or running as root, skipping chown
homepage | ▲ Next.js 16.3.0
homepage | - Local: http://[::1]:3000
homepage | - Network: http://[::]:3000
homepage | ✓ Ready in 0ms
homepage | ✓ Running next.config took 0.9ms

Authelia logs

nothing relevant to homepage

Browser Logs

GET
https://homepage.mydomain.com/auth/signin?callbackUrl=/
[HTTP/1.1 200 OK 11ms]
GET
https://homepage.mydomain.com/api/config/custom.css
[HTTP/1.1 200 OK 7ms]
GET
https://homepage.mydomain.com/_next/static/css/dbae698cc33e2221.css
[HTTP/1.1 200 OK 9ms]
GET
https://homepage.mydomain.com/_next/static/chunks/webpack-66724185a494d9a3.js
[HTTP/1.1 200 OK 9ms]
GET
https://homepage.mydomain.com/_next/static/chunks/framework-e3529b6b8d723676.js
[HTTP/1.1 200 OK 14ms]
GET
https://homepage.mydomain.com/_next/static/chunks/pages/_app-e5ad55f84b8a28bb.js
[HTTP/1.1 200 OK 9ms]
GET
https://homepage.mydomain.com/_next/static/chunks/main-fee1af1dc9c60fa6.js
[HTTP/1.1 200 OK 11ms]
GET
https://homepage.mydomain.com/_next/static/chunks/b424493d-0c41413e53fa8c97.js
[HTTP/1.1 200 OK 7ms]
GET
https://homepage.mydomain.com/_next/static/KwNGuRjqoQhP4v-UH1gS9/_buildManifest.js
[HTTP/1.1 200 OK 9ms]
GET
https://homepage.mydomain.com/_next/static/chunks/pages/auth/signin-d33ad828c066f6b4.js
[HTTP/1.1 200 OK 10ms]
GET
https://homepage.mydomain.com/_next/static/KwNGuRjqoQhP4v-UH1gS9/_ssgManifest.js
[HTTP/1.1 200 OK 8ms]
Propriété « line-clamp » inconnue. Déclaration abandonnée. custom.css:240:16
Erreur d’analyse de la valeur pour « -webkit-text-size-adjust ». Déclaration abandonnée. dbae698cc33e2221.css:1:6228
Propriété « -moz-osx-font-smoothing » inconnue. Déclaration abandonnée. dbae698cc33e2221.css:1:96927
Descripteur « font-size » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102095
Descripteur « line-height » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102112
Descripteur « color » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102122
Descripteur « visibility » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102137
Descripteur « word-spacing » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102158
Descripteur « letter-spacing » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102180
Descripteur « fint-style » inconnu dans la règle @font-face. Passage à la déclaration suivante. dbae698cc33e2221.css:1:102533
GET
https://homepage.mydomain.com/_next/static/media/Manrope.63012343.woff2
[HTTP/1.1 200 OK 5ms]
GET
https://homepage.mydomain.com/favicon.ico
[HTTP/1.1 404 Not Found 3ms]
XHR
GET
https://homepage.mydomain.com/api/auth/session
[HTTP/1.1 200 OK 5ms]

Troubleshooting

not relevant

[shamoon]

Do you have any custom.css? In 2.1 your css now loads on the signin page, before it didn’t. Otherwise the changes to auth are super minimal, and I can’t produce any issue like this

[joomlafab]

Hi. Thanks a lots for your answer. I confirm I have a custom css and that was the problem, specifically I had a bad rule on .shadow-lg.

[shamoon]

Great thanks for confirming

[github-actions[bot]]

This discussion has been automatically closed because it was marked as answered. See our contributing guidelines for more details.