This commit is contained in:
Matthias Hochmeister
2026-02-27 14:02:03 +01:00
parent 04d4f89834
commit 1c6c59c199
10 changed files with 76 additions and 66 deletions

View File

@@ -21,8 +21,8 @@ Before you begin, you need:
- An Authentik instance (self-hosted or cloud)
- Admin access to Authentik
- Your Feuerwehr Dashboard URL (e.g., `https://dashboard.yourdomain.com`)
- Your backend API URL (e.g., `https://api.yourdomain.com`)
- Your Feuerwehr Dashboard URL (e.g., `https://start.feuerwehr-rems.at`)
- Your backend API URL (e.g., `https://start.feuerwehr-rems.at`)
## Authentik Installation
@@ -146,7 +146,7 @@ Protocol Settings:
```
http://localhost:5173/auth/callback
http://localhost/auth/callback
https://dashboard.yourdomain.com/auth/callback
https://start.feuerwehr-rems.at/auth/callback
```
Add one URI per line. Include all environments (development, staging, production).
@@ -173,7 +173,7 @@ Configure the application:
Name: Feuerwehr Dashboard
Slug: feuerwehr-dashboard
Provider: Feuerwehr Dashboard Provider (select from dropdown)
Launch URL: https://dashboard.yourdomain.com
Launch URL: https://start.feuerwehr-rems.at
```
**UI Settings** (optional):
@@ -256,10 +256,10 @@ This is the Vite dev server URL.
### Production Environment
```
https://dashboard.yourdomain.com/auth/callback
https://start.feuerwehr-rems.at/auth/callback
```
Replace `yourdomain.com` with your actual domain.
Replace `feuerwehr-rems.at` with your actual domain.
### Docker Local Testing
@@ -317,11 +317,11 @@ const scopes = 'openid profile email';
1. In the provider details, find **OpenID Configuration URL**:
```
https://auth.yourdomain.com/application/o/feuerwehr-dashboard/.well-known/openid-configuration
https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/.well-known/openid-configuration
```
2. Important URLs from this configuration:
- **Issuer**: `https://auth.yourdomain.com/application/o/feuerwehr-dashboard/`
- **Issuer**: `https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/`
- **Authorization Endpoint**: Auto-discovered
- **Token Endpoint**: Auto-discovered
- **Userinfo Endpoint**: Auto-discovered
@@ -334,8 +334,8 @@ Update your Feuerwehr Dashboard `.env` file:
# Authentik OAuth Configuration
AUTHENTIK_CLIENT_ID=<your-client-id>
AUTHENTIK_CLIENT_SECRET=<your-client-secret>
AUTHENTIK_ISSUER=https://auth.yourdomain.com/application/o/feuerwehr-dashboard/
AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
AUTHENTIK_ISSUER=https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/
AUTHENTIK_REDIRECT_URI=https://start.feuerwehr-rems.at/auth/callback
# For development, use:
# AUTHENTIK_ISSUER=http://localhost:9000/application/o/feuerwehr-dashboard/
@@ -361,7 +361,7 @@ AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
2. **Open the dashboard** in your browser:
```
Development: http://localhost:5173
Production: https://dashboard.yourdomain.com
Production: https://start.feuerwehr-rems.at
```
3. **Click "Login" button**
@@ -441,7 +441,7 @@ In the dashboard:
**Solution**:
1. Ensure `CORS_ORIGIN` in backend `.env` matches frontend URL
2. For development: `CORS_ORIGIN=http://localhost:5173`
3. For production: `CORS_ORIGIN=https://dashboard.yourdomain.com`
3. For production: `CORS_ORIGIN=https://start.feuerwehr-rems.at`
4. Restart backend after changing CORS settings
### Issue 4: Token Validation Failed
@@ -561,7 +561,7 @@ After configuration, verify:
Client Type: Confidential
Client ID: <auto-generated>
Client Secret: <auto-generated>
Redirect URIs: https://dashboard.yourdomain.com/auth/callback
Redirect URIs: https://start.feuerwehr-rems.at/auth/callback
Scopes: openid, profile, email
Access Token Validity: 3600
Refresh Token Validity: 86400
@@ -571,8 +571,8 @@ Refresh Token Validity: 86400
```bash
AUTHENTIK_CLIENT_ID=<from-authentik>
AUTHENTIK_CLIENT_SECRET=<from-authentik>
AUTHENTIK_ISSUER=https://auth.yourdomain.com/application/o/feuerwehr-dashboard/
AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
AUTHENTIK_ISSUER=https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/
AUTHENTIK_REDIRECT_URI=https://start.feuerwehr-rems.at/auth/callback
```
## Security Best Practices