Skip to content

[BUG] Pocket-ID not working? #136

Closed
Closed

Description

@viriatusX
Image

I don't know if it's a Bug or something has changed in TinyAuth.
I have Pocket-ID configured to use Passkeys but in the TinyAuth part I get an error.

Image Image

I have seen that the mate @nebula-it has it working. That is why I say that I do not know if it is a Bug or something has changed or I have misconfigured.

Thanks for your work.

Activity

  1. steveiliop56 commented on May 3, 2025

    @steveiliop56
    Member

    Hello!

    Seems like tinyauth is getting an empty email address. Are you trying to login with the admin account or a simple account from pocket ID?

  2. viriatusX commented on May 3, 2025

    @viriatusX
    Author

    I have tried with admin account and with another account created in Pocket ID and same error.

  3. steveiliop56 commented on May 3, 2025

    @steveiliop56
    Member

    I will try to make an alpha/nightly release that will include more logs on what's getting parsed and what not, then we will be able to debug further.

  4. viriatusX commented on May 3, 2025

    @viriatusX
    Author

    Great. I will wait for this alpha release to debug the real problem

  5. nebula-it commented on May 3, 2025

    @nebula-it

    Hey @viriatusX
    Does your account has email set in pocket-id?
    The combo is working for me, both on latest versions.

  6. viriatusX commented on May 3, 2025

    @viriatusX
    Author

    Hey @viriatusX Does your account has email set in pocket-id? The combo is working for me, both on latest versions.

    Yes of coure.

    In pocket-id I have specified the email in my account. Within the OIDC Clients tab configuration I have specified the TinyAuth Callback URL (https://auth.mydomain.com/api/oauth/callback/generic

    Logout Callback URL is empty.

    And in group of assigned users I have selected which includes the user.

    There is no other configuration, it's correct?

    As a reverse proxy I use Pangolin (Traefik). I don't know if I have to add anything special.

  7. nebula-it commented on May 3, 2025

    @nebula-it

    This is what I have in my config:

      COOKIE_SECURE: "true"
      DISABLE_CONTINUE: "true"
      SECRET: 
      APP_URL: https://<tiny auth url>
      GENERIC_CLIENT_ID: client id from pocket-id
      GENERIC_CLIENT_SECRET: secret from pocket-id
      GENERIC_AUTH_URL: https://pocketid.example.com/authorize
      GENERIC_TOKEN_URL: https://pocketid.example.com/api/oidc/token
      GENERIC_USER_URL: https://pocketid.example.com/api/oidc/userinfo
      GENERIC_SCOPES: "openid email profile"
      GENERIC_NAME: PocketID
    

    Try a curl from tiny auth container to your pocker id url and see if it works and vice-versa. This is just to ensure DNS is good and they can each each other

  8. viriatusX commented on May 3, 2025

    @viriatusX
    Author

    This is what I have in my config:

      COOKIE_SECURE: "true"
      DISABLE_CONTINUE: "true"
      SECRET: 
      APP_URL: https://<tiny auth url>
      GENERIC_CLIENT_ID: client id from pocket-id
      GENERIC_CLIENT_SECRET: secret from pocket-id
      GENERIC_AUTH_URL: https://pocketid.example.com/authorize
      GENERIC_TOKEN_URL: https://pocketid.example.com/api/oidc/token
      GENERIC_USER_URL: https://pocketid.example.com/api/oidc/userinfo
      GENERIC_SCOPES: "openid email profile"
      GENERIC_NAME: PocketID
    

    Try a curl from tiny auth container to your pocker id url and see if it works and vice-versa. This is just to ensure DNS is good and they can each each other

    Incredible. It works.
    The error was in GENERIC_SCOPES. I had it like this: "openid profile email" and I have changed it as you have it: "openid email profile" and it works.

    For changing the "email" order in SCOPES 😅

  9. nebula-it commented on May 3, 2025

    @nebula-it

    Perfect, glad it worked. We should add documentation for pocket-id

  10. viriatusX commented on May 3, 2025

    @viriatusX
    Author

    Perfect, glad it worked. We should add documentation for pocket-id

    That would be great 👏
    I close the issue. I reiterate my thanks.

  11. steveiliop56 commented on May 3, 2025

    @steveiliop56
    Member

    Glad it worked! I will try to figure out the cause of this issue (I guess it's something in the pocket ID side, so I will have to ask there). Documentation will come in the following days as soon as I have time to write it ;)

  12. steveiliop56 commented on May 3, 2025

    @steveiliop56
    Member

    @viriatusX turns out the issue was not the order of the scopes but the quotes you added in the environment variables. So what should work is:

    environment:
      - GENERIC_SCOPES=openid email profile
  13. viriatusX commented on May 4, 2025

    @viriatusX
    Author

    @viriatusX turns out the issue was not the order of the scopes but the quotes you added in the environment variables. So what should work is:

    environment:

    • GENERIC_SCOPES=openid email profile

    Correct. I reversed the order but without the quotes and it works. Great 👏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions