Vikunja - OIDC enabled reset after restart
-
I would like to use vikunja with our cloudflare access openid. I installed the app with "leave user management to app" setting. Config works as it i supposed to, but the auth.openid.enabled is reset to false with every restart.
I assume this is a bug isn´t it?
-
Crosspost: https://forum.cloudron.io/topic/14055/oidc-enabled-reset-after-restart
Sorry for crosspost. I am afraid else the thread would not be seen. Feel free to close one if needed.
-
J JUVOJustin referenced this topic on
-
Hello @JUVOJustin
From the package code: https://git.cloudron.io/packages/vikunja-app/-/blob/master/start.sh?ref_type=heads#L65-L76# OIDC config if [[ -n "${CLOUDRON_OIDC_ISSUER:-}" ]]; then yq e ".auth.openid.enabled=true" -i /app/data/config.yml yq e ".auth.openid.redirecturl=\"${CLOUDRON_APP_ORIGIN}/auth/openid/\"" -i /app/data/config.yml yq e ".auth.openid.providers=[]" -i /app/data/config.yml yq e ".auth.openid.providers[0].name=\"Cloudron\"" -i /app/data/config.yml yq e ".auth.openid.providers[0].authurl=\"${CLOUDRON_OIDC_ISSUER}\"" -i /app/data/config.yml yq e ".auth.openid.providers[0].clientid=\"${CLOUDRON_OIDC_CLIENT_ID}\"" -i /app/data/config.yml yq e ".auth.openid.providers[0].clientsecret=\"${CLOUDRON_OIDC_CLIENT_SECRET}\"" -i /app/data/config.yml else yq e ".auth.openid.enabled=false" -i /app/data/config.yml fiWith your described issue, it would be best to remove the
elsepart so it is not reset on restart.
I will inform the team. -
PR created, pipeline is running:
https://git.cloudron.io/packages/vikunja-app/-/merge_requests/15 -
Love it! Solved for me
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login