Account Managment with Native Authentication possible?

[user33341]

Tuwunel 1.8.2 with Element X 26.07.1 offers Account Management in the settings, which was not present in 1.7.1. However the link to matrix.domain.com/_tuwunel/oidc/account shows an error:
"There was a problem with the 'identity_provider' directive in your configuration: No identity provider configured"

In my config, TUWUNEL_OIDC_NATIVE_AUTH is set to "true" but there is no upstream Identity Provider configured. Is Account Managment with Native Authentication possible?

[jevolk]

Account management does work with native authentication, as of a fix that landed on main a few days after 1.8.2 was tagged. In 1.8.2 we advertised the account management URL to clients unconditionally, but the handler behind it only knew how to redirect to an upstream identity provider, so with TUWUNEL_OIDC_NATIVE_AUTH set and nothing else it could only report that no provider was configured. It now serves the native login page for that flow instead.

You can pick it up from the main branch image in the meantime:

docker pull jevolk/tuwunel:main

docker run -d -p 8448:8008 \
    -v db:/var/lib/tuwunel/ \
    -e TUWUNEL_SERVER_NAME="your.server.name" \
    -e TUWUNEL_OIDC_NATIVE_AUTH=true \
    jevolk/tuwunel:main

If you already have this running under compose or a systemd unit, point the image at jevolk/tuwunel:main and recreate the container; nothing in your configuration needs to change.

We expect 1.8.3 early this week, which will carry the fix into latest.

Sorry for the confusion this caused, and thanks for your patience.

[user33341]

Thank you for your time to write up this comprehensiv answer!