Fix Authelia OIDC client secret syntax to use template filter

expand-env double-processes substituted values so $ in bcrypt hashes
get re-expanded. Switch back to template filter with {{ env "VAR" }}
syntax which returns values as-is.

authelia/config/configuration.yaml

@@ -65,7 +65,7 @@ identity_providers:
     clients:
       - client_id: open-webui
         client_name: Open WebUI
-        client_secret: '${AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI}'
+        client_secret: '{{ env "AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI" }}'
         public: false
         authorization_policy: one_factor
         token_endpoint_auth_method: client_secret_post
@@ -79,7 +79,7 @@ identity_providers:
 
       - client_id: linkding
         client_name: Linkding
-        client_secret: '${AUTHELIA_OIDC_CLIENT_SECRET_LINKDING}'
+        client_secret: '{{ env "AUTHELIA_OIDC_CLIENT_SECRET_LINKDING" }}'
         public: false
         authorization_policy: one_factor
         token_endpoint_auth_method: client_secret_post

authelia/docker-compose.yml

@@ -13,8 +13,7 @@ services:
       - AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET=${AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET}
       - AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI=${AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI}
       - AUTHELIA_OIDC_CLIENT_SECRET_LINKDING=${AUTHELIA_OIDC_CLIENT_SECRET_LINKDING}
-      # expand-env substitutes ${VAR} in config files; use template filter only if Go template syntax needed
-      - X_AUTHELIA_CONFIG_FILTERS=expand-env
+      - X_AUTHELIA_CONFIG_FILTERS=template
     networks:
       - npm-network
       - authelia-internal