robrotheram / taiga-contrib-openid-auth

Taiga plugin for openid authentication
45 stars 25 forks source link

Custom scope not working #38

Open CartierPierre opened 2 years ago

CartierPierre commented 2 years ago

I tried to change my scope in the docker-compose.yml file but I saw no changes. I supposed it's written in the back and front Dockerfile : https://github.com/robrotheram/taiga-contrib-openid-auth/blob/c765ac3e0aefe61e7cf9069253b50be2e05103db/docker/back/Dockerfile#L8 https://github.com/robrotheram/taiga-contrib-openid-auth/blob/7a7e54ea7ebe8df6826811bbeb8819c22b468290/docker/front/Dockerfile#L15

maxweigner commented 5 months ago

Thank you for noticing. Setting this up with authentik has cost me a whole day because scope 'profile' was ignored -_-.

For anyone wondering how to fix it: copy the contents of the property mapping authentik default OAuth Mapping: OpenID 'profile' into a newly created scope mapping to 'openid'. It should look like so: 2024-02-03T19:16:55,582285557+01:00

Then in the provider advanced protocol settings choose the newly created and authentik default OAuth Mapping: OpenID 'email'.

Automatic account creation and login should work now.