update authelia example config

This commit is contained in:
Carter Mintey 2024-03-16 01:37:55 +00:00
parent 36b0661e1d
commit 7df34890d4
3 changed files with 76 additions and 36 deletions

View File

@ -52,37 +52,76 @@ Follow the instructions in [Authelia's documentation](https://www.authelia.com/c
This is only an example and not meant to be an exhaustive configuration. You should read through the documentation and adjust your configuration as needed. This is only an example and not meant to be an exhaustive configuration. You should read through the documentation and adjust your configuration as needed.
```yaml === "v4.37"
identity_providers:
oidc: This configuration format has been deprecated in Authelia v4.38. It is still valid, however it will eventually be removed.
access_token_lifespan: 1h
authorize_code_lifespan: 1m ```yaml
id_token_lifespan: 1h identity_providers:
refresh_token_lifespan: 90m oidc:
enable_client_debug_messages: false access_token_lifespan: 1h
enforce_pkce: public_clients_only authorize_code_lifespan: 1m
cors: id_token_lifespan: 1h
endpoints: refresh_token_lifespan: 90m
- authorization enable_client_debug_messages: false
- token enforce_pkce: public_clients_only
- revocation cors:
- introspection endpoints:
allowed_origins: - authorization
- https://mealie.example.com - token
allowed_origins_from_client_redirect_uris: false - revocation
clients: - introspection
- id: mealie allowed_origins:
description: Mealie - https://mealie.example.com
authorization_policy: one_factor clients:
redirect_uris: - id: mealie
- https://mealie.example.com/login description: Mealie
public: true authorization_policy: one_factor
grant_types: redirect_uris:
- authorization_code - https://mealie.example.com/login
scopes: public: true
- openid grant_types:
- profile - authorization_code
- groups scopes:
- email - openid
- offline_access - profile
``` - groups
- email
```
=== "v4.38"
The configuration in Authelia v4.38 has changed. Although the old configuration will still work, it is deprecated and will eventually be removed.
```yaml
identity_providers:
oidc:
jwks:
- key: {{ secret "/secrets/private_key_file" | mindent 10 "|" | msquote }}
enforce_pkce: public_clients_only
cors:
endpoints:
- userinfo
- authorization
- token
- revocation
- introspection
allowed_origins:
- https://mealie.example.com
allowed_origins_from_client_redirect_uris: false
clients:
- client_id: mealie
client_name: Mealie
authorization_policy: one_factor
redirect_uris:
- https://mealie.example.com/login
public: true
pkce_challenge_method: S256
grant_types:
- authorization_code
scopes:
- openid
- profile
- groups
- email
```

File diff suppressed because one or more lines are too long

View File

@ -41,7 +41,8 @@ markdown_extensions:
custom_checkbox: true custom_checkbox: true
- admonition - admonition
- attr_list - attr_list
- pymdownx.tabbed - pymdownx.tabbed:
alternate_style: true
- pymdownx.superfences: - pymdownx.superfences:
custom_fences: custom_fences:
- name: mermaid - name: mermaid