nikdoof/pocket-id
1
0
Fork 0
mirror of https://github.com/nikdoof/pocket-id.git synced 2025-12-14 15:22:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: fix reauthentication in caddy-security example

Browse Source
This commit is contained in:
Elias Schneider
2025-02-04 17:57:36 +01:00
parent e2c38138be
commit 19ef4833e9
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/docs/guides/proxy-services.md
View File

@@ -23,7 +23,7 @@ With [caddy-security](https://github.com/greenpau/caddy-security) you can easily
#### 1. Create a new OIDC client in Pocket ID. #### 1. Create a new OIDC client in Pocket ID.
Create a new OIDC client in Pocket ID by navigating to `https://<your-domain>/settings/admin/oidc-clients`. Now enter `https://<domain-of-proxied-service>/auth/oauth2/generic/authorization-code-callback` as the callback URL. After adding the client, you will obtain the client ID and client secret, which you will need in the next step. Create a new OIDC client in Pocket ID by navigating to `https://<your-domain>/settings/admin/oidc-clients`. Now enter `https://<domain-of-proxied-service>/caddy-security/oauth2/generic/authorization-code-callback` as the callback URL. After adding the client, you will obtain the client ID and client secret, which you will need in the next step.
#### 2. Install caddy-security #### 2. Install caddy-security
@@ -66,7 +66,7 @@ caddy add-package github.com/greenpau/caddy-security
} }
authorization policy mypolicy { authorization policy mypolicy {
set auth url /auth/oauth2/generic set auth url /caddy-security/oauth2/generic
allow roles user allow roles user
inject headers with claims inject headers with claims
} }
@@ -75,8 +75,7 @@ caddy add-package github.com/greenpau/caddy-security
https://<domain-of-your-service> { https://<domain-of-your-service> {
@auth { @auth {
path /auth/oauth2/generic path /caddy-security/*
path /auth/oauth2/generic/authorization-code-callback
} }
route @auth { route @auth {