fix: separate Authentik application slug from OAuth client ID

Authentik uses different values for:
- OAuth Client ID (UUID for authentication)
- Application Slug (URL-friendly identifier like 'headquarter-web')

Add AUTHENTIK_APPLICATION_SLUG config to build correct Authentik URLs
while keeping AUTHENTIK_CLIENT_ID for OAuth token exchange.
This commit is contained in:
Fusion
2026-05-18 21:46:54 +02:00
parent 137757602f
commit 0509b9eb4a
3 changed files with 11 additions and 2 deletions
+5
View File
@@ -27,8 +27,13 @@ AUTHENTIK_DOMAIN=authentik.local
# WEB_PUBLIC_URL=https://app.example.com
# Authentik Configuration
# Client ID: The OAuth client ID from Authentik (may be a UUID)
AUTHENTIK_CLIENT_ID=headquarter-web
AUTHENTIK_CLIENT_SECRET=change-me
# Application Slug: The URL-friendly identifier used in Authentik URLs
# This is often the same as the application identifier/slug in Authentik
# e.g., if your Authentik app URL is /application/o/headquarter-web/, use "headquarter-web"
AUTHENTIK_APPLICATION_SLUG=headquarter-web
# Override Authentik URLs if they differ from the default pattern
# AUTHENTIK_AUTHORIZE_URL=https://authentik.example.com/application/o/authorize/
# AUTHENTIK_TOKEN_URL=https://authentik.example.com/application/o/token/