You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I don't know if it's a Bug or something has changed in TinyAuth.
I have Pocket-ID configured to use Passkeys but in the TinyAuth part I get an error.
I have seen that the mate @nebula-it has it working. That is why I say that I do not know if it is a Bug or something has changed or I have misconfigured.
COOKIE_SECURE: "true"
DISABLE_CONTINUE: "true"
SECRET:
APP_URL: https://<tiny auth url>
GENERIC_CLIENT_ID: client id from pocket-id
GENERIC_CLIENT_SECRET: secret from pocket-id
GENERIC_AUTH_URL: https://pocketid.example.com/authorize
GENERIC_TOKEN_URL: https://pocketid.example.com/api/oidc/token
GENERIC_USER_URL: https://pocketid.example.com/api/oidc/userinfo
GENERIC_SCOPES: "openid email profile"
GENERIC_NAME: PocketID
Try a curl from tiny auth container to your pocker id url and see if it works and vice-versa. This is just to ensure DNS is good and they can each each other
COOKIE_SECURE: "true"
DISABLE_CONTINUE: "true"
SECRET:
APP_URL: https://<tiny auth url>
GENERIC_CLIENT_ID: client id from pocket-id
GENERIC_CLIENT_SECRET: secret from pocket-id
GENERIC_AUTH_URL: https://pocketid.example.com/authorize
GENERIC_TOKEN_URL: https://pocketid.example.com/api/oidc/token
GENERIC_USER_URL: https://pocketid.example.com/api/oidc/userinfo
GENERIC_SCOPES: "openid email profile"
GENERIC_NAME: PocketID
Try a curl from tiny auth container to your pocker id url and see if it works and vice-versa. This is just to ensure DNS is good and they can each each other
Incredible. It works.
The error was in GENERIC_SCOPES. I had it like this: "openid profile email" and I have changed it as you have it: "openid email profile" and it works.
Glad it worked! I will try to figure out the cause of this issue (I guess it's something in the pocket ID side, so I will have to ask there). Documentation will come in the following days as soon as I have time to write it ;)
Activity
steveiliop56 commentedon May 3, 2025
Hello!
Seems like tinyauth is getting an empty email address. Are you trying to login with the admin account or a simple account from pocket ID?
viriatusX commentedon May 3, 2025
I have tried with admin account and with another account created in Pocket ID and same error.
steveiliop56 commentedon May 3, 2025
I will try to make an alpha/nightly release that will include more logs on what's getting parsed and what not, then we will be able to debug further.
viriatusX commentedon May 3, 2025
Great. I will wait for this alpha release to debug the real problem
nebula-it commentedon May 3, 2025
Hey @viriatusX
Does your account has email set in pocket-id?
The combo is working for me, both on latest versions.
viriatusX commentedon May 3, 2025
Yes of coure.
In pocket-id I have specified the email in my account. Within the OIDC Clients tab configuration I have specified the TinyAuth Callback URL (https://auth.mydomain.com/api/oauth/callback/generic
Logout Callback URL is empty.
And in group of assigned users I have selected which includes the user.
There is no other configuration, it's correct?
As a reverse proxy I use Pangolin (Traefik). I don't know if I have to add anything special.
nebula-it commentedon May 3, 2025
This is what I have in my config:
Try a curl from tiny auth container to your pocker id url and see if it works and vice-versa. This is just to ensure DNS is good and they can each each other
viriatusX commentedon May 3, 2025
Incredible. It works.
The error was in GENERIC_SCOPES. I had it like this: "openid profile email" and I have changed it as you have it: "openid email profile" and it works.
For changing the "email" order in SCOPES 😅
nebula-it commentedon May 3, 2025
Perfect, glad it worked. We should add documentation for pocket-id
viriatusX commentedon May 3, 2025
That would be great 👏
I close the issue. I reiterate my thanks.
steveiliop56 commentedon May 3, 2025
Glad it worked! I will try to figure out the cause of this issue (I guess it's something in the pocket ID side, so I will have to ask there). Documentation will come in the following days as soon as I have time to write it ;)
steveiliop56 commentedon May 3, 2025
@viriatusX turns out the issue was not the order of the scopes but the quotes you added in the environment variables. So what should work is:
viriatusX commentedon May 4, 2025
Correct. I reversed the order but without the quotes and it works. Great 👏