docs: fix gitea oidc (#3800)

pull/3802/head
James Elliott 2022-08-07 14:56:33 +10:00 committed by GitHub
parent 2d26b4e115
commit 8140c5007f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 11 deletions

View File

@ -52,25 +52,23 @@ To configure [Gitea] to utilize Authelia as an [OpenID Connect] Provider:
{{< figure src="gitea.png" alt="Gitea" width="300" >}} {{< figure src="gitea.png" alt="Gitea" width="300" >}}
#### Gitea App.ini To configure [Gitea] to perform automatic user creation for the `auth.example.com` domain via [OpenID Connect]:
The following variables should be setup to enable 'auto' user creation -
``` 1. Edit the following values in the [Gitea] `app.ini`:
```ini
[openid] [openid]
ENABLE_OPENID_SIGNIN = false ENABLE_OPENID_SIGNIN = false
ENABLE_OPENID_SIGNUP = true ENABLE_OPENID_SIGNUP = true
WHITELISTED_URIS = auth.domain.com WHITELISTED_URIS = auth.example.com
[service] [service]
DISABLE_REGISTRATION = false DISABLE_REGISTRATION = false
ALLOW_ONLY_EXTERNAL_REGISTRATION = true ALLOW_ONLY_EXTERNAL_REGISTRATION = true
SHOW_REGISTRATION_BUTTON = false SHOW_REGISTRATION_BUTTON = false
``` ```
* 'ENABLE_OPENID_SIGNIN' - shows an additional OpenID section on the login page. Setting this to false removes it - this allows all auth to be instigated by Authelia.
* 'ENABLE_OPENID_SIGNUP' - this allows the OIDC user to sign up with Gitea, with the user passed from your Authelia login session. Take a look at the [See Also](#see-also) section for the cheatsheets corresponding to the sections above for their
* 'WHITELISTED_URIS' - this restricts the login/OIDC source to be Authelia descriptions.
* 'DISABLE_REGISTRATION' - this disables general user (non-OIDC) registration
* 'ALLOW_ONLY_EXTERNAL_REGISTRATION' - this allows registration via OIDC only
* 'SHOW_REGISTRATION_BUTTON' - This hides the sign up button so manual registrations via the home page are not possible
### Authelia ### Authelia
@ -92,6 +90,11 @@ will operate with the above example:
userinfo_signing_algorithm: none userinfo_signing_algorithm: none
``` ```
[Authelia]: https://www.authelia.com ## See Also
- [Gitea] app.ini [Config Cheat Sheet - OpenID](https://docs.gitea.io/en-us/config-cheat-sheet/#openid-openid)
- [Gitea] app.ini [Config Cheat Sheet - Service](https://docs.gitea.io/en-us/config-cheat-sheet/#service-service)
- [Authelia]: https://www.authelia.com
[Gitea]: https://gitea.io/ [Gitea]: https://gitea.io/
[OpenID Connect]: ../../openid-connect/introduction.md [OpenID Connect]: ../../openid-connect/introduction.md