Fix open-webui OIDC token auth method to client_secret_basic

Open WebUI (authlib) sends credentials in the Authorization header (client_secret_basic), not the POST body. Authelia was rejecting it.
2026-02-27 03:08:30 +00:00
parent bfb71d67d2
commit 66664a5925
1 changed files with 1 additions and 1 deletions
@@ -69,7 +69,7 @@ identity_providers:
        client_secret: '{{ secret "/config/secrets/oidc_open_webui" }}'
        public: false
        authorization_policy: one_factor
-        token_endpoint_auth_method: client_secret_post
+        token_endpoint_auth_method: client_secret_basic
        redirect_uris:
          - https://open-webui.kolpacksoftware.com/oauth/oidc/callback
        scopes: