Frank
b48de913b8
open-webui: SSO via authentik (OIDC authorization-code flow)
- quadlet: OAUTH_*/OPENID_* env + EnvironmentFile for the client secret
(secret stays off-repo in /home/dank/Containers/open-webui/env, mode 600)
- authentik objects created live: application 'open-webui', OAuth2 provider
'Open WebUI' (Strict redirect URI), 'Open WebUI roles' scope mapping,
entitlements Open WebUI Users/Admins bound to openwebui_users/admins
- e2e: 18-openwebui-sso.spec.ts (silent SSO round-trip) + prefix in config
- unit tests: OIDC wiring + secret-hygiene assertions
- docs: SSO section + history entry
2026-09-24 20:04:17 -07:00
..
2026-08-28 02:20:06 -07:00
2026-09-22 02:09:41 -07:00
2026-09-24 20:04:17 -07:00
2026-09-22 02:09:41 -07:00
2026-09-22 02:09:41 -07:00
2026-09-22 02:09:41 -07:00
2026-09-22 02:09:41 -07:00
2026-09-22 02:09:41 -07:00
2026-09-22 02:09:41 -07:00
2026-09-22 02:10:04 -07:00