oidc for wikijs

group_vars/authelia/vault.yml

@@ -32,6 +32,27 @@ authelia_users:
       39643130343932643561653830353733633234656338313465313031353463313732
     groups:
       - users
+wikijs_uuid: !vault |
+  $ANSIBLE_VAULT;1.1;AES256
+  62303565643064643732353839373834353436363532313538303231623765363632663361666364
+  6631326465643739353130656132303462333530656236300a646630383964353235346136393961
+  34343363613138373566613539396130303539353335383934306231373634313831383135613439
+  3636626464323035620a633435623664306461616363346665336134363138646232353132653265
+  30643533396436303536646638633633313539316133653336343931613363313737636366653331
+  3734323836363861306638373262343035313938626132366664
+wikijs_client_secret: !vault |
+  $ANSIBLE_VAULT;1.1;AES256
+  64656630646633666130653734633463366364363035363238323539303731326261363230636431
+  6661353065636435653638623262366331633465616333640a313966366631396366346532306431
+  65333037303665373434613632303062613133383631333963366435313562643439613130353065
+  3430303561656335300a656337613862346439643139626634653563643732643064393939303134
+  62386537626138333361653364323935626437363766326362643931336532373631383266653764
+  33363366343164613234616232613763356433393537313436343736646438363261656236353863
+  31353532643339633635316332643562346435393664303265346534353665313065393564656166
+  36616664613139303734623662663934313435353536343932363834623038343535623738386661
+  38393862326636616165393134313964373936346566356264316639623630396131383233613862
+  37353432346530353161373831393633646464656265363138393961306361316563363433393465
+  323561653539386238623663343066363832
 authelia_jwt_secret: !vault |
   $ANSIBLE_VAULT;1.1;AES256
   34306239616233393235376564646464613833313332353365666264663735656536663133643736

roles/authelia/templates/configuration.yml.j2

@@ -78,3 +78,23 @@ identity_providers:
           - profile
           - email
         userinfo_signed_response_alg: none
+      - client_id: wikijs
+        client_name: Wiki
+        client_secret: {{ wikijs_client_secret }}
+        public: false
+        authorization_policy: 'two_factor'
+        require_pkce: false
+        pkce_challenge_method: ''
+        redirect_uris:
+          - 'https://wikijs.{{ authelia_domain }}/login/{{ wikijs_uuid }}/callback'  # Note this must be copied during step 7 of the Application configuration.
+        scopes:
+          - 'openid'
+          - 'profile'
+          - 'email'
+        response_types:
+          - 'code'
+        grant_types:
+          - 'authorization_code'
+        access_token_signed_response_alg: 'none'
+        userinfo_signed_response_alg: 'none'
+        token_endpoint_auth_method: 'client_secret_post'