Immich can't authenticate with authentik

[lukee12zakk]

I have searched the existing issues, both open and closed, to make sure this is not a duplicate report.

• Yes

The bug

when I try to sign in to immich with my authentik setup, it doesn't work. It works with proxmox, but somehow, immich isn't working. I'm running immich on a proxmox lxc made by the pve scripts people, And authentik is on a casaos lxc. I also have npm plus set up to use my ddns, and that works fine.

The OS that Immich Server is running on

Debian lxc

Version of Immich Server

2.3.1

Version of Immich Mobile App

nan

Platform with the issue

• Server
• Web
• Mobile

Device make and model

No response

Your docker-compose.yml content

Not sure how to add this

Your .env content

Same with this, not sure how to add it

Reproduction steps

1. Set up immich oauth the exact way that the authentik and immich guide states
2. Attempt to sign in
3. Get the error
   ...

Relevant log output

�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/users/profile-image, DELETE} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/users/:id/profile-image, GET} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RoutesResolver]�[39m �[32mViewController {/api/view}:�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/view/folder/unique-paths, GET} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/view/folder, GET} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RoutesResolver]�[39m �[32mWorkflowController {/api/workflows}:�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/workflows, POST} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/workflows, GET} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/workflows/:id, GET} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/workflows/:id, PUT} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:RouterExplorer]�[39m �[32mMapped {/api/workflows/:id, DELETE} route�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:NestApplication]�[39m �[32mNest application successfully started�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:Bootstrap]�[39m �[32mImmich Server is listening on http://[::1]:2283 [v2.3.1] [production] �[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:06 AM �[32m    LOG�[39m �[33m[Api:MachineLearningRepository]�[39m �[32mMachine learning server became healthy (http://127.0.0.1:3003).�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:40:12 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Connect:    cEzqm1c0AvFD5OxaAAAB�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 10:40:31 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~gupqpgkl]�[39m �[31mOAuth login failed: server responded with an error in the response body�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 10:40:31 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~gupqpgkl]�[39m ResponseBodyError: server responded with an error in the response body
    at checkOAuthBodyError �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:924:19�[90m)�[39m
�[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
    at async processGenericAccessTokenResponse �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1202:5�[90m)�[39m
    at async processAuthorizationCodeOAuth2Response �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1436:20�[90m)�[39m
    at async authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:980:18�[90m)�[39m
    at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
    at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
    at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
  cause: {
    error: �[32m'invalid_grant'�[39m,
    error_description: �[32m'The provided authorization grant or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client'�[39m,
    request_id: �[32m'dae3ff0c9e2646ceac83b64c31cf4b1e'�[39m
  },
  code: �[32m'OAUTH_RESPONSE_BODY_ERROR'�[39m,
  error: �[32m'invalid_grant'�[39m,
  status: �[33m400�[39m,
  error_description: �[32m'The provided authorization grant or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client'�[39m
}
�[31m[Nest] 383  - �[39m11/21/2025, 10:40:31 AM �[31m  ERROR�[39m �[33m[Api:ErrorInterceptor~gupqpgkl]�[39m �[31mUnknown error: Error: OAuth login failed�[39m
Error: OAuth login failed
    at OAuthRepository.getProfile (/opt/immich/app/dist/repositories/oauth.repository.js:72:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async AuthService.callback (/opt/immich/app/dist/services/auth.service.js:188:25)
    at async OAuthController.finishOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:47:22)
�[31m[Nest] 383  - �[39m11/21/2025, 10:40:35 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~s76z7kaz]�[39m �[31mOAuth login failed: invalid response encountered�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 10:40:35 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~s76z7kaz]�[39m ClientError: invalid response encountered
    at e �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:116:12�[90m)�[39m
    at errorHandler �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:139:23�[90m)�[39m
    at authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:991:9�[90m)�[39m
�[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
    at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
    at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
    at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
  code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
  [cause]: OperationProcessingError: unexpected JWT "alg" header parameter
      at OPE �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:116:12�[90m)�[39m
      at checkSigningAlgorithm �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1996:19�[90m)�[39m
      at validateJwt �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1722:5�[90m)�[39m
      at processGenericAccessTokenResponse �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1242:39�[90m)�[39m
  �[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
      at async processAuthorizationCodeOAuth2Response �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1436:20�[90m)�[39m
      at async authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:980:18�[90m)�[39m
      at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
      at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
      at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
    code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
    [cause]: {
      header: {
        alg: �[32m'ES384'�[39m,
        kid: �[32m'5b761725acd1094b3c6028dc318a3f85'�[39m,
        typ: �[32m'JWT'�[39m
      },
      expected: �[32m'RS256'�[39m,
      reason: �[32m'client configuration'�[39m
    }
  }
}
�[31m[Nest] 383  - �[39m11/21/2025, 10:40:35 AM �[31m  ERROR�[39m �[33m[Api:ErrorInterceptor~s76z7kaz]�[39m �[31mUnknown error: Error: OAuth login failed�[39m
Error: OAuth login failed
    at OAuthRepository.getProfile (/opt/immich/app/dist/repositories/oauth.repository.js:72:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async AuthService.callback (/opt/immich/app/dist/services/auth.service.js:188:25)
    at async OAuthController.finishOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:47:22)
�[31m[Nest] 383  - �[39m11/21/2025, 10:42:06 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~b7oixlw8]�[39m �[31mOAuth login failed: server responded with an error in the response body�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 10:42:06 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~b7oixlw8]�[39m ResponseBodyError: server responded with an error in the response body
    at checkOAuthBodyError �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:924:19�[90m)�[39m
�[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
    at async processGenericAccessTokenResponse �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1202:5�[90m)�[39m
    at async processAuthorizationCodeOAuth2Response �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1436:20�[90m)�[39m
    at async authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:980:18�[90m)�[39m
    at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
    at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
    at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
  cause: {
    error: �[32m'invalid_grant'�[39m,
    error_description: �[32m'The provided authorization grant or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client'�[39m,
    request_id: �[32m'7bd35b8db2ae4e46b606c7f21f873a5b'�[39m
  },
  code: �[32m'OAUTH_RESPONSE_BODY_ERROR'�[39m,
  error: �[32m'invalid_grant'�[39m,
  status: �[33m400�[39m,
  error_description: �[32m'The provided authorization grant or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client'�[39m
}
�[31m[Nest] 383  - �[39m11/21/2025, 10:42:06 AM �[31m  ERROR�[39m �[33m[Api:ErrorInterceptor~b7oixlw8]�[39m �[31mUnknown error: Error: OAuth login failed�[39m
Error: OAuth login failed
    at OAuthRepository.getProfile (/opt/immich/app/dist/repositories/oauth.repository.js:72:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async AuthService.callback (/opt/immich/app/dist/services/auth.service.js:188:25)
    at async OAuthController.finishOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:47:22)
�[31m[Nest] 383  - �[39m11/21/2025, 10:42:09 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~2ee6gtut]�[39m �[31mOAuth login failed: invalid response encountered�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 10:42:09 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~2ee6gtut]�[39m ClientError: invalid response encountered
    at e �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:116:12�[90m)�[39m
    at errorHandler �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:139:23�[90m)�[39m
    at authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:991:9�[90m)�[39m
�[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
    at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
    at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
    at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
  code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
  [cause]: OperationProcessingError: unexpected JWT "alg" header parameter
      at OPE �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:116:12�[90m)�[39m
      at checkSigningAlgorithm �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1996:19�[90m)�[39m
      at validateJwt �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1722:5�[90m)�[39m
      at processGenericAccessTokenResponse �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1242:39�[90m)�[39m
  �[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
      at async processAuthorizationCodeOAuth2Response �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1436:20�[90m)�[39m
      at async authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:980:18�[90m)�[39m
      at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
      at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
      at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
    code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
    [cause]: {
      header: {
        alg: �[32m'ES384'�[39m,
        kid: �[32m'5b761725acd1094b3c6028dc318a3f85'�[39m,
        typ: �[32m'JWT'�[39m
      },
      expected: �[32m'RS256'�[39m,
      reason: �[32m'client configuration'�[39m
    }
  }
}
�[31m[Nest] 383  - �[39m11/21/2025, 10:42:09 AM �[31m  ERROR�[39m �[33m[Api:ErrorInterceptor~2ee6gtut]�[39m �[31mUnknown error: Error: OAuth login failed�[39m
Error: OAuth login failed
    at OAuthRepository.getProfile (/opt/immich/app/dist/repositories/oauth.repository.js:72:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async AuthService.callback (/opt/immich/app/dist/services/auth.service.js:188:25)
    at async OAuthController.finishOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:47:22)
�[32m[Nest] 383  - �[39m11/21/2025, 10:42:14 AM �[32m    LOG�[39m �[33m[Api:SystemConfigService~1qhfkjsb]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 96  - �[39m11/21/2025, 10:42:14 AM �[32m    LOG�[39m �[33m[Microservices:SystemConfigService]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:42:44 AM �[32m    LOG�[39m �[33m[Api:SystemConfigService~5hw8y5qn]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 96  - �[39m11/21/2025, 10:42:44 AM �[32m    LOG�[39m �[33m[Microservices:SystemConfigService]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 10:43:27 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Disconnect: cEzqm1c0AvFD5OxaAAAB�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:01:57 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Connect:    PLKWrmo8ueUCJFYOAAAD�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:05:13 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Disconnect: PLKWrmo8ueUCJFYOAAAD�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:07:57 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Connect:    nfmzZOpE7S8eWBmKAAAF�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:15:23 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Disconnect: nfmzZOpE7S8eWBmKAAAF�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:24:03 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~lfykheqc]�[39m �[31mOAuth login failed: invalid response encountered�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:24:03 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~lfykheqc]�[39m ClientError: invalid response encountered
    at e �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:116:12�[90m)�[39m
    at errorHandler �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:139:23�[90m)�[39m
    at authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:991:9�[90m)�[39m
�[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
    at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
    at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
    at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
  code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
  [cause]: OperationProcessingError: unexpected JWT "alg" header parameter
      at OPE �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:116:12�[90m)�[39m
      at checkSigningAlgorithm �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1996:19�[90m)�[39m
      at validateJwt �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1722:5�[90m)�[39m
      at processGenericAccessTokenResponse �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1242:39�[90m)�[39m
  �[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
      at async processAuthorizationCodeOAuth2Response �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1436:20�[90m)�[39m
      at async authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:980:18�[90m)�[39m
      at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
      at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
      at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
    code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
    [cause]: {
      header: {
        alg: �[32m'ES384'�[39m,
        kid: �[32m'5b761725acd1094b3c6028dc318a3f85'�[39m,
        typ: �[32m'JWT'�[39m
      },
      expected: �[32m'RS256'�[39m,
      reason: �[32m'client configuration'�[39m
    }
  }
}
�[31m[Nest] 383  - �[39m11/21/2025, 11:24:03 AM �[31m  ERROR�[39m �[33m[Api:ErrorInterceptor~lfykheqc]�[39m �[31mUnknown error: Error: OAuth login failed�[39m
Error: OAuth login failed
    at OAuthRepository.getProfile (/opt/immich/app/dist/repositories/oauth.repository.js:72:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async AuthService.callback (/opt/immich/app/dist/services/auth.service.js:188:25)
    at async OAuthController.finishOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:47:22)
�[33m[Nest] 383  - �[39m11/21/2025, 11:26:26 AM �[33m   WARN�[39m �[33m[Api:ServerInfoRepository~boi5qqwi]�[39m �[33mFailed to read /opt/immich/app/build-lock.json�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:26:28 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Connect:    5w-mIum5ri-IcWd4AAAH�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:31:43 AM �[32m    LOG�[39m �[33m[Api:SystemConfigService~soledina]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 96  - �[39m11/21/2025, 11:31:43 AM �[32m    LOG�[39m �[33m[Microservices:SystemConfigService]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:31:53 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Connect:    0URyRi0d8atoHkicAAAJ�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:32:07 AM �[32m    LOG�[39m �[33m[Api:WebsocketRepository]�[39m �[32mWebsocket Disconnect: 0URyRi0d8atoHkicAAAJ�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:32:20 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~i41p6rul]�[39m �[31mError in OAuth discovery: TypeError: fetch failed�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:32:20 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~i41p6rul]�[39m �[31mTypeError: fetch failed
    at node:internal/deps/undici/undici:15845:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///opt/immich/app/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///opt/immich/app/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/opt/immich/app/dist/repositories/oauth.repository.js:88:20)
    at async OAuthRepository.authorize (/opt/immich/app/dist/repositories/oauth.repository.js:25:24)
    at async AuthService.authorize (/opt/immich/app/dist/services/auth.service.js:175:16)
    at async OAuthController.startOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:37:46)�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:32:24 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~fvk2y83d]�[39m �[31mError in OAuth discovery: TypeError: fetch failed�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:32:24 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~fvk2y83d]�[39m �[31mTypeError: fetch failed
    at node:internal/deps/undici/undici:15845:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///opt/immich/app/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///opt/immich/app/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/opt/immich/app/dist/repositories/oauth.repository.js:88:20)
    at async OAuthRepository.authorize (/opt/immich/app/dist/repositories/oauth.repository.js:25:24)
    at async AuthService.authorize (/opt/immich/app/dist/services/auth.service.js:175:16)
    at async OAuthController.startOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:37:46)�[39m
�[32m[Nest] 383  - �[39m11/21/2025, 11:33:04 AM �[32m    LOG�[39m �[33m[Api:SystemConfigService~q1dsrtwh]�[39m �[32mLogLevel=log (set via system config)�[39m
�[32m[Nest] 96  - �[39m11/21/2025, 11:33:04 AM �[32m    LOG�[39m �[33m[Microservices:SystemConfigService]�[39m �[32mLogLevel=log (set via system config)�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:33:12 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~o551yd1i]�[39m �[31mOAuth login failed: invalid response encountered�[39m
�[31m[Nest] 383  - �[39m11/21/2025, 11:33:12 AM �[31m  ERROR�[39m �[33m[Api:OAuthRepository~o551yd1i]�[39m ClientError: invalid response encountered
    at e �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:116:12�[90m)�[39m
    at errorHandler �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:139:23�[90m)�[39m
    at authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:991:9�[90m)�[39m
�[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
    at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
    at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
    at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
  code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
  [cause]: OperationProcessingError: unexpected JWT "alg" header parameter
      at OPE �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:116:12�[90m)�[39m
      at checkSigningAlgorithm �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1996:19�[90m)�[39m
      at validateJwt �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1722:5�[90m)�[39m
      at processGenericAccessTokenResponse �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1242:39�[90m)�[39m
  �[90m    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)�[39m
      at async processAuthorizationCodeOAuth2Response �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/oauth4webapi@3.8.2/node_modules/�[4moauth4webapi�[24m/build/index.js:1436:20�[90m)�[39m
      at async authorizationCodeGrant �[90m(file:///opt/immich/app/�[39mnode_modules/�[4m.pnpm�[24m/openid-client@6.8.1/node_modules/�[4mopenid-client�[24m/build/index.js:980:18�[90m)�[39m
      at async OAuthRepository.getProfile �[90m(/opt/immich/app/�[39mdist/repositories/oauth.repository.js:56:28�[90m)�[39m
      at async AuthService.callback �[90m(/opt/immich/app/�[39mdist/services/auth.service.js:188:25�[90m)�[39m
      at async OAuthController.finishOAuth �[90m(/opt/immich/app/�[39mdist/controllers/oauth.controller.js:47:22�[90m)�[39m {
    code: �[32m'OAUTH_INVALID_RESPONSE'�[39m,
    [cause]: {
      header: {
        alg: �[32m'ES384'�[39m,
        kid: �[32m'5b761725acd1094b3c6028dc318a3f85'�[39m,
        typ: �[32m'JWT'�[39m
      },
      expected: �[32m'RS256'�[39m,
      reason: �[32m'client configuration'�[39m
    }
  }
}
�[31m[Nest] 383  - �[39m11/21/2025, 11:33:12 AM �[31m  ERROR�[39m �[33m[Api:ErrorInterceptor~o551yd1i]�[39m �[31mUnknown error: Error: OAuth login failed�[39m
Error: OAuth login failed
    at OAuthRepository.getProfile (/opt/immich/app/dist/repositories/oauth.repository.js:72:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async AuthService.callback (/opt/immich/app/dist/services/auth.service.js:188:25)
    at async OAuthController.finishOAuth (/opt/immich/app/dist/controllers/oauth.controller.js:47:22)

Additional information

No response

[AdamT20054]

Also getting this.

Logs

    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:51 AM   ERROR [Api:OAuthRepository~ojfzo77r] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:51 AM   ERROR [Api:OAuthRepository~ojfzo77r] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~t79uhrk6] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~t79uhrk6] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~gg6r3dlb] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~gg6r3dlb] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~b7q2j1i2] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~b7q2j1i2] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~osd6vkru] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~osd6vkru] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~yjv1v0lm] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~yjv1v0lm] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~yu9la8tp] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:52 AM   ERROR [Api:OAuthRepository~yu9la8tp] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:17:53 AM   ERROR [Api:OAuthRepository~k5ax3snj] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:17:53 AM   ERROR [Api:OAuthRepository~k5ax3snj] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:21:29 AM   ERROR [Api:OAuthRepository~wz8061ne] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:21:29 AM   ERROR [Api:OAuthRepository~wz8061ne] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:23:35 AM   ERROR [Api:OAuthRepository~jxzaaxp9] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:23:35 AM   ERROR [Api:OAuthRepository~jxzaaxp9] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~wlaptwhk] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~wlaptwhk] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~yq61tyr9] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~yq61tyr9] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~7eu0glvw] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~7eu0glvw] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~786j3ozu] Error in OAuth discovery: TypeError: fetch failed
[Nest] 31  - 12/12/2025, 7:23:36 AM   ERROR [Api:OAuthRepository~786j3ozu] TypeError: fetch failed
    at node:internal/deps/undici/undici:13510:13
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async performDiscovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:266:16)
    at async discovery (file:///usr/src/app/server/node_modules/.pnpm/openid-client@6.8.1/node_modules/openid-client/build/index.js:243:16)
    at async OAuthRepository.getClient (/usr/src/app/server/dist/repositories/oauth.repository.js:88:20)

Compose:

services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities:
                - gpu
                - compute
                - video
    volumes:
      - ${UPLOAD_LOCATION}:/usr/src/app/upload
      - ${THUMB_LOCATION}:/usr/src/app/upload/thumbs
      - ${ENCODED_VIDEO_LOCATION}:/usr/src/app/upload/encoded-video
      - ${PROFILE_LOCATION}:/usr/src/app/upload/profile
      - ${BACKUP_LOCATION}:/usr/src/app/upload/backups
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - stack.env
    ports:
      - '2283:2283'
      - '8081:8081'
      - '8082:8082'
    depends_on:
      - redis
      - database
    restart: always

    healthcheck:
      disable: false

  immich-machine-learning:
    container_name: immich_machine_learning
    image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}-cuda
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities:
                - gpu
    volumes:
      - model-cache:/cache
    env_file:
      - stack.env
    restart: always
    healthcheck:
      disable: false

  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:8-bookworm@sha256:fea8b3e67b15729d4bb70589eb03367bab9ad1ee89c876f54327fc7c6e618571
    healthcheck:
      test: redis-cli ping || exit 1
    restart: always

  database:
    container_name: immich_postgres
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:41eacbe83eca995561fe43814fd4891e16e39632806253848efaf04d3c8a8b84
    environment:
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_USER: ${DB_USERNAME}
      POSTGRES_DB: ${DB_DATABASE_NAME}
      POSTGRES_INITDB_ARGS: '--data-checksums'
      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
      # DB_STORAGE_TYPE: 'HDD'
    volumes:
      # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
    shm_size: 128mb
    restart: always

volumes:
  model-cache:

Had no issues setting up Immich and Authentik in the past. Both running latest releases.

[Lobidu]

I've experienced the same issue. Please make sure to copy the OpenID Configuration URL from Authentik (under "Applications/Providers//Overview") to the issuerUrl in your immich OAuth config.

The immich docs kinda suggest that the issuerUrl should be on the immich domain, but it should be an authentik URL.