From ee540aa8e7df452b411bcfaf1070a682d9c87f2f Mon Sep 17 00:00:00 2001 From: James Elliott Date: Sat, 27 Aug 2022 08:43:55 +1000 Subject: [PATCH] docs: add offline_access to outline (#3914) --- docs/content/en/integration/openid-connect/outline/index.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/content/en/integration/openid-connect/outline/index.md b/docs/content/en/integration/openid-connect/outline/index.md index db55add2b..1206814a5 100644 --- a/docs/content/en/integration/openid-connect/outline/index.md +++ b/docs/content/en/integration/openid-connect/outline/index.md @@ -33,6 +33,9 @@ This example makes the following assumptions: * __Client ID:__ `outline` * __Client Secret:__ `outline_client_secret` +*__Important Note:__ At the time of this writing [Outline] requires the `offline_access` scope by default. Failure to include this scope will result +in an error as [Outline] will attempt to use a refresh token that is never issued.* + ## Configuration ### Application @@ -51,7 +54,7 @@ OIDC_TOKEN_URI=https://auth.example.com/api/oidc/token OIDC_USERINFO_URI=https://auth.example.com/api/oidc/userinfo OIDC_USERNAME_CLAIM=preferred_username OIDC_DISPLAY_NAME=Authelia -OIDC_SCOPES="openid profile email" +OIDC_SCOPES="openid offline_access profile email" ``` ### Authelia @@ -70,6 +73,7 @@ which will operate with the above example: - https://outline.example.com/auth/oidc.callback scopes: - openid + - offline_access - profile - email userinfo_signing_algorithm: none