mirror of
https://github.com/mealie-recipes/mealie.git
synced 2025-06-03 13:44:55 -04:00
update authelia example config
This commit is contained in:
parent
36b0661e1d
commit
7df34890d4
@ -52,37 +52,76 @@ Follow the instructions in [Authelia's documentation](https://www.authelia.com/c
|
|||||||
|
|
||||||
This is only an example and not meant to be an exhaustive configuration. You should read through the documentation and adjust your configuration as needed.
|
This is only an example and not meant to be an exhaustive configuration. You should read through the documentation and adjust your configuration as needed.
|
||||||
|
|
||||||
```yaml
|
=== "v4.37"
|
||||||
identity_providers:
|
|
||||||
oidc:
|
This configuration format has been deprecated in Authelia v4.38. It is still valid, however it will eventually be removed.
|
||||||
access_token_lifespan: 1h
|
|
||||||
authorize_code_lifespan: 1m
|
```yaml
|
||||||
id_token_lifespan: 1h
|
identity_providers:
|
||||||
refresh_token_lifespan: 90m
|
oidc:
|
||||||
enable_client_debug_messages: false
|
access_token_lifespan: 1h
|
||||||
enforce_pkce: public_clients_only
|
authorize_code_lifespan: 1m
|
||||||
cors:
|
id_token_lifespan: 1h
|
||||||
endpoints:
|
refresh_token_lifespan: 90m
|
||||||
- authorization
|
enable_client_debug_messages: false
|
||||||
- token
|
enforce_pkce: public_clients_only
|
||||||
- revocation
|
cors:
|
||||||
- introspection
|
endpoints:
|
||||||
allowed_origins:
|
- authorization
|
||||||
- https://mealie.example.com
|
- token
|
||||||
allowed_origins_from_client_redirect_uris: false
|
- revocation
|
||||||
clients:
|
- introspection
|
||||||
- id: mealie
|
allowed_origins:
|
||||||
description: Mealie
|
- https://mealie.example.com
|
||||||
authorization_policy: one_factor
|
clients:
|
||||||
redirect_uris:
|
- id: mealie
|
||||||
- https://mealie.example.com/login
|
description: Mealie
|
||||||
public: true
|
authorization_policy: one_factor
|
||||||
grant_types:
|
redirect_uris:
|
||||||
- authorization_code
|
- https://mealie.example.com/login
|
||||||
scopes:
|
public: true
|
||||||
- openid
|
grant_types:
|
||||||
- profile
|
- authorization_code
|
||||||
- groups
|
scopes:
|
||||||
- email
|
- openid
|
||||||
- offline_access
|
- profile
|
||||||
```
|
- groups
|
||||||
|
- email
|
||||||
|
```
|
||||||
|
|
||||||
|
=== "v4.38"
|
||||||
|
|
||||||
|
The configuration in Authelia v4.38 has changed. Although the old configuration will still work, it is deprecated and will eventually be removed.
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
identity_providers:
|
||||||
|
oidc:
|
||||||
|
jwks:
|
||||||
|
- key: {{ secret "/secrets/private_key_file" | mindent 10 "|" | msquote }}
|
||||||
|
enforce_pkce: public_clients_only
|
||||||
|
cors:
|
||||||
|
endpoints:
|
||||||
|
- userinfo
|
||||||
|
- authorization
|
||||||
|
- token
|
||||||
|
- revocation
|
||||||
|
- introspection
|
||||||
|
allowed_origins:
|
||||||
|
- https://mealie.example.com
|
||||||
|
allowed_origins_from_client_redirect_uris: false
|
||||||
|
clients:
|
||||||
|
- client_id: mealie
|
||||||
|
client_name: Mealie
|
||||||
|
authorization_policy: one_factor
|
||||||
|
redirect_uris:
|
||||||
|
- https://mealie.example.com/login
|
||||||
|
public: true
|
||||||
|
pkce_challenge_method: S256
|
||||||
|
grant_types:
|
||||||
|
- authorization_code
|
||||||
|
scopes:
|
||||||
|
- openid
|
||||||
|
- profile
|
||||||
|
- groups
|
||||||
|
- email
|
||||||
|
```
|
||||||
|
File diff suppressed because one or more lines are too long
@ -41,7 +41,8 @@ markdown_extensions:
|
|||||||
custom_checkbox: true
|
custom_checkbox: true
|
||||||
- admonition
|
- admonition
|
||||||
- attr_list
|
- attr_list
|
||||||
- pymdownx.tabbed
|
- pymdownx.tabbed:
|
||||||
|
alternate_style: true
|
||||||
- pymdownx.superfences:
|
- pymdownx.superfences:
|
||||||
custom_fences:
|
custom_fences:
|
||||||
- name: mermaid
|
- name: mermaid
|
||||||
|
Loading…
x
Reference in New Issue
Block a user