You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would love to see tinyauth being able to act as an oauth provider to some of my apps to basically support SSO.
E.g. configure tinyauth as oauth provider to portainer, etc.
This looks like a great project and I'm delighted to hear that this is on the roadmap. A lightweight service (not Keycloak or Authentik) for homelabs to broker external OAuth (such as Google or Github) and also provide OIDC to self-hosted apps is a niche the community needs filled.
To add to the wishlist, I hope it can work with Opencloud. That means it needs to (a) support PKCE with a client ID but without a client secret (since Opencloud uses a SPA without a secret); (b) support user-specified client IDs, as Opencloud hard-codes client IDs for the apps; and (c) allow specifying CORS headers so that the token requests from the SPA succeed (lower priority since reverse proxy can handle it). https://docs.opencloud.eu/docs/admin/configuration/authentication-and-user-management/external-idp
I think the PKCE stuff will have to be implemented later. OIDC is a bit complex to implement correctly and I would like to start with a basic server and we can add the rest of the features later.
Reacted by Travis Pettijohn, Melkis Hengue, Jonathan Chemla, NEANC.or.HZCK, DarrenYOW, Ami and Michał Wadas
Tinyauth is already an awesome app yet making it an OIDC provider while hiding all the complexity for user will be great!
I already use tinyauth in my setup but now I want to have a one-time single sign-in and have a non-expirable cookie/session which will make me to forget about those nasty login pages at least in my selfhosted apps, -- and all of that without replacing tinyauth with authelia or other apps
Activity
steveiliop56 commentedon Nov 23, 2025
This is planned for v5 : )
[-][FEATURE] OAUTH Support[/-][+][FEATURE] Make Tinyauth an OIDC provider[/+]pettijohn commentedon Dec 8, 2025
This looks like a great project and I'm delighted to hear that this is on the roadmap. A lightweight service (not Keycloak or Authentik) for homelabs to broker external OAuth (such as Google or Github) and also provide OIDC to self-hosted apps is a niche the community needs filled.
To add to the wishlist, I hope it can work with Opencloud. That means it needs to (a) support PKCE with a client ID but without a client secret (since Opencloud uses a SPA without a secret); (b) support user-specified client IDs, as Opencloud hard-codes client IDs for the apps; and (c) allow specifying CORS headers so that the token requests from the SPA succeed (lower priority since reverse proxy can handle it). https://docs.opencloud.eu/docs/admin/configuration/authentication-and-user-management/external-idp
steveiliop56 commentedon Dec 8, 2025
I think the PKCE stuff will have to be implemented later. OIDC is a bit complex to implement correctly and I would like to start with a basic server and we can add the rest of the features later.
Mayurifag commentedon Dec 29, 2025
Tinyauth is already an awesome app yet making it an OIDC provider while hiding all the complexity for user will be great!
I already use tinyauth in my setup but now I want to have a one-time single sign-in and have a non-expirable cookie/session which will make me to forget about those nasty login pages at least in my selfhosted apps, -- and all of that without replacing tinyauth with authelia or other apps
Thanks in advance!! 👍🏻
steveiliop56 commentedon Feb 1, 2026
Implemented with #605! I am so looking forward to v5!
jo-chemla commentedon Feb 2, 2026
Congrats on that, indeed very exciting feature for v5!