fix URLs
This commit is contained in:
@@ -21,8 +21,8 @@ Before you begin, you need:
|
||||
|
||||
- An Authentik instance (self-hosted or cloud)
|
||||
- Admin access to Authentik
|
||||
- Your Feuerwehr Dashboard URL (e.g., `https://dashboard.yourdomain.com`)
|
||||
- Your backend API URL (e.g., `https://api.yourdomain.com`)
|
||||
- Your Feuerwehr Dashboard URL (e.g., `https://start.feuerwehr-rems.at`)
|
||||
- Your backend API URL (e.g., `https://start.feuerwehr-rems.at`)
|
||||
|
||||
## Authentik Installation
|
||||
|
||||
@@ -146,7 +146,7 @@ Protocol Settings:
|
||||
```
|
||||
http://localhost:5173/auth/callback
|
||||
http://localhost/auth/callback
|
||||
https://dashboard.yourdomain.com/auth/callback
|
||||
https://start.feuerwehr-rems.at/auth/callback
|
||||
```
|
||||
|
||||
Add one URI per line. Include all environments (development, staging, production).
|
||||
@@ -173,7 +173,7 @@ Configure the application:
|
||||
Name: Feuerwehr Dashboard
|
||||
Slug: feuerwehr-dashboard
|
||||
Provider: Feuerwehr Dashboard Provider (select from dropdown)
|
||||
Launch URL: https://dashboard.yourdomain.com
|
||||
Launch URL: https://start.feuerwehr-rems.at
|
||||
```
|
||||
|
||||
**UI Settings** (optional):
|
||||
@@ -256,10 +256,10 @@ This is the Vite dev server URL.
|
||||
### Production Environment
|
||||
|
||||
```
|
||||
https://dashboard.yourdomain.com/auth/callback
|
||||
https://start.feuerwehr-rems.at/auth/callback
|
||||
```
|
||||
|
||||
Replace `yourdomain.com` with your actual domain.
|
||||
Replace `feuerwehr-rems.at` with your actual domain.
|
||||
|
||||
### Docker Local Testing
|
||||
|
||||
@@ -317,11 +317,11 @@ const scopes = 'openid profile email';
|
||||
|
||||
1. In the provider details, find **OpenID Configuration URL**:
|
||||
```
|
||||
https://auth.yourdomain.com/application/o/feuerwehr-dashboard/.well-known/openid-configuration
|
||||
https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/.well-known/openid-configuration
|
||||
```
|
||||
|
||||
2. Important URLs from this configuration:
|
||||
- **Issuer**: `https://auth.yourdomain.com/application/o/feuerwehr-dashboard/`
|
||||
- **Issuer**: `https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/`
|
||||
- **Authorization Endpoint**: Auto-discovered
|
||||
- **Token Endpoint**: Auto-discovered
|
||||
- **Userinfo Endpoint**: Auto-discovered
|
||||
@@ -334,8 +334,8 @@ Update your Feuerwehr Dashboard `.env` file:
|
||||
# Authentik OAuth Configuration
|
||||
AUTHENTIK_CLIENT_ID=<your-client-id>
|
||||
AUTHENTIK_CLIENT_SECRET=<your-client-secret>
|
||||
AUTHENTIK_ISSUER=https://auth.yourdomain.com/application/o/feuerwehr-dashboard/
|
||||
AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
|
||||
AUTHENTIK_ISSUER=https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/
|
||||
AUTHENTIK_REDIRECT_URI=https://start.feuerwehr-rems.at/auth/callback
|
||||
|
||||
# For development, use:
|
||||
# AUTHENTIK_ISSUER=http://localhost:9000/application/o/feuerwehr-dashboard/
|
||||
@@ -361,7 +361,7 @@ AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
|
||||
2. **Open the dashboard** in your browser:
|
||||
```
|
||||
Development: http://localhost:5173
|
||||
Production: https://dashboard.yourdomain.com
|
||||
Production: https://start.feuerwehr-rems.at
|
||||
```
|
||||
|
||||
3. **Click "Login" button**
|
||||
@@ -441,7 +441,7 @@ In the dashboard:
|
||||
**Solution**:
|
||||
1. Ensure `CORS_ORIGIN` in backend `.env` matches frontend URL
|
||||
2. For development: `CORS_ORIGIN=http://localhost:5173`
|
||||
3. For production: `CORS_ORIGIN=https://dashboard.yourdomain.com`
|
||||
3. For production: `CORS_ORIGIN=https://start.feuerwehr-rems.at`
|
||||
4. Restart backend after changing CORS settings
|
||||
|
||||
### Issue 4: Token Validation Failed
|
||||
@@ -561,7 +561,7 @@ After configuration, verify:
|
||||
Client Type: Confidential
|
||||
Client ID: <auto-generated>
|
||||
Client Secret: <auto-generated>
|
||||
Redirect URIs: https://dashboard.yourdomain.com/auth/callback
|
||||
Redirect URIs: https://start.feuerwehr-rems.at/auth/callback
|
||||
Scopes: openid, profile, email
|
||||
Access Token Validity: 3600
|
||||
Refresh Token Validity: 86400
|
||||
@@ -571,8 +571,8 @@ Refresh Token Validity: 86400
|
||||
```bash
|
||||
AUTHENTIK_CLIENT_ID=<from-authentik>
|
||||
AUTHENTIK_CLIENT_SECRET=<from-authentik>
|
||||
AUTHENTIK_ISSUER=https://auth.yourdomain.com/application/o/feuerwehr-dashboard/
|
||||
AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
|
||||
AUTHENTIK_ISSUER=https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr-dashboard/
|
||||
AUTHENTIK_REDIRECT_URI=https://start.feuerwehr-rems.at/auth/callback
|
||||
```
|
||||
|
||||
## Security Best Practices
|
||||
|
||||
Reference in New Issue
Block a user