Fix open-webui OIDC token auth method to client_secret_basic

Open WebUI (authlib) sends credentials in the Authorization header
(client_secret_basic), not the POST body. Authelia was rejecting it.
This commit is contained in:
2026-02-27 03:08:30 +00:00
parent bfb71d67d2
commit 66664a5925
+1 -1
View File
@@ -69,7 +69,7 @@ identity_providers:
client_secret: '{{ secret "/config/secrets/oidc_open_webui" }}' client_secret: '{{ secret "/config/secrets/oidc_open_webui" }}'
public: false public: false
authorization_policy: one_factor authorization_policy: one_factor
token_endpoint_auth_method: client_secret_post token_endpoint_auth_method: client_secret_basic
redirect_uris: redirect_uris:
- https://open-webui.kolpacksoftware.com/oauth/oidc/callback - https://open-webui.kolpacksoftware.com/oauth/oidc/callback
scopes: scopes: