diff --git a/docs/docs/administration/img/authentik-redirect-uris-example.webp b/docs/docs/administration/img/authentik-redirect-uris-example.webp new file mode 100644 index 0000000000..ae54dbd293 Binary files /dev/null and b/docs/docs/administration/img/authentik-redirect-uris-example.webp differ diff --git a/docs/docs/administration/img/google-example.webp b/docs/docs/administration/img/google-redirect-uris-example.webp similarity index 100% rename from docs/docs/administration/img/google-example.webp rename to docs/docs/administration/img/google-redirect-uris-example.webp diff --git a/docs/docs/administration/img/immich-google-example.webp b/docs/docs/administration/img/immich-google-example.webp deleted file mode 100644 index ed6c31432d..0000000000 Binary files a/docs/docs/administration/img/immich-google-example.webp and /dev/null differ diff --git a/docs/docs/administration/img/oauth-settings.png b/docs/docs/administration/img/oauth-settings.png deleted file mode 100644 index 9ab903e699..0000000000 Binary files a/docs/docs/administration/img/oauth-settings.png and /dev/null differ diff --git a/docs/docs/administration/oauth.md b/docs/docs/administration/oauth.md index 2ee84970df..ab317787bc 100644 --- a/docs/docs/administration/oauth.md +++ b/docs/docs/administration/oauth.md @@ -117,7 +117,27 @@ Immich has a route (`/api/oauth/mobile-redirect`) that is already configured to Here's an example of OAuth configured for Authentik: - +Configuration of Authorised redirect URIs (Authentik OAuth2/OpenID Provider) + + + +Configuration of OAuth in Immich System Settings + +| Setting | Value | +| ---------------------------- | ---------------------------------------------------------------------------------- | +| Issuer URL | `https://example.immich.app/application/o/immich/.well-known/openid-configuration` | +| Client ID | AFCj2rM1f4rps**\*\*\*\***\***\*\*\*\***lCLEum6hH9... | +| Client Secret | 0v89FXkQOWO\***\*\*\*\*\***\*\*\***\*\*\*\*\***mprbvXD549HH6s1iw... | +| Scope | openid email profile | +| Signing Algorithm | RS256 | +| Storage Label Claim | preferred_username | +| Storage Quota Claim | immich_quota | +| Default Storage Quota (GiB) | 0 (0 for unlimited quota) | +| Button Text | Sign in with Authentik (optional) | +| Auto Register | Enabled (optional) | +| Auto Launch | Enabled (optional) | +| Mobile Redirect URI Override | Disable | +| Mobile Redirect URI | | @@ -126,11 +146,13 @@ Here's an example of OAuth configured for Authentik: ### Google Example +Here's an example of OAuth configured for Google: + Configuration of Authorised redirect URIs (Google Console) - + -Configuration of OAuth in System Settings +Configuration of OAuth in Immich System Settings | Setting | Value | | ---------------------------- | ------------------------------------------------------------------------------------------------------ | diff --git a/docs/src/css/custom.css b/docs/src/css/custom.css index 748fab1981..2d67b4b050 100644 --- a/docs/src/css/custom.css +++ b/docs/src/css/custom.css @@ -15,6 +15,10 @@ button { font-family: 'Overpass', sans-serif; } +img { + border-radius: 15px; +} + /* You can override the default Infima variables here. */ :root { --ifm-color-primary: #4250af;