Wrong Authentik OIDC Issuer URL expected #1018

New Issue

2026-03-22T17:06:05-05:00

GiteaMirror commented

2026-03-22 17:06:05 -05:00

Originally created by @SirJohn2024 on GitHub (Feb 10, 2025).

Authentik OpenID Configuration Issuer URLs have a trailing '/' that apparently is not expected:

thread 'tokio-runtime-worker' panicked at bin/core/src/auth/oidc/client.rs:66:4:
called Result::unwrap() on an Err value: Failed to init default OIDC client
Caused by:
0: Failed to get OIDC /.well-known/openid-configuration
1: Validation error: unexpected issuer URI https://authentik.local.xxxxxxxxx.dev/application/o/komodo/ (expected https://authentik.local.xxxxxxxxxxxxxt.dev/application/o/komodo)

From what I know, OIDC Issuer URLs cannot be changed...🤷‍♂️

Originally created by @SirJohn2024 on GitHub (Feb 10, 2025). Authentik OpenID Configuration Issuer URLs have a trailing '/' that apparently is not expected: thread 'tokio-runtime-worker' panicked at bin/core/src/auth/oidc/client.rs:66:4: called `Result::unwrap()` on an `Err` value: Failed to init default OIDC client Caused by: 0: Failed to get OIDC /.well-known/openid-configuration 1: Validation error: unexpected issuer URI `https://authentik.local.xxxxxxxxx.dev/application/o/komodo/` (expected `https://authentik.local.xxxxxxxxxxxxxt.dev/application/o/komodo`) From what I know, OIDC Issuer URLs cannot be changed...🤷‍♂️

GiteaMirror closed this issue

2026-03-22 17:06:05 -05:00

GiteaMirror commented

2026-03-22 17:06:06 -05:00

@Elekam commented on GitHub (Mar 26, 2025):

Did you manage to resolve this somehow? Or why was it just closed? I have also not been able to setup authentik with Komodo, getting the exact same error

@Elekam commented on GitHub (Mar 26, 2025): Did you manage to resolve this somehow? Or why was it just closed? I have also not been able to setup authentik with Komodo, getting the exact same error

GiteaMirror commented

2026-03-22 17:06:06 -05:00

@Skyfay commented on GitHub (Apr 3, 2025):

@Elekam It worked for me after some research.

Make sure the KOMODO_OIDC_PROVIDER= have a / at the end as you see it in your authentik dashboard.

Wrong Example: https://auth.example.com/application/o/komodo
Correct example: https://auth.example.com/application/o/komodo/

Under Applications > Providers > Komodo (or what you named it):

make sure you have a Signing Keyset. I used authentik Self-signed Certificate
make sure you set the Redirect URLs/Originsto the follwoing value: https://komodo.example.com/auth/oidc/callback

After changing this things it worked for me. After first login you need to enable the OICD User with you local user in the Dashboard bevor you can access it.

Additional information:
I set KOMODO_OIDC_USE_FULL_EMAIL=false
I used some information from this issue to solve the problem: https://github.com/moghtech/komodo/issues/237

@Skyfay commented on GitHub (Apr 3, 2025): @Elekam It worked for me after some research. 1. Make sure the ``KOMODO_OIDC_PROVIDER=`` have a ``/`` at the end as you see it in your authentik dashboard. - Wrong Example: ``https://auth.example.com/application/o/komodo`` - Correct example: ``https://auth.example.com/application/o/komodo/`` 2. Under ``Applications > Providers > Komodo (or what you named it)``: - make sure you have a ``Signing Key``set. I used ``authentik Self-signed Certificate`` - make sure you set the ``Redirect URLs/Origins``to the follwoing value: ``https://komodo.example.com/auth/oidc/callback`` After changing this things it worked for me. After first login you need to enable the OICD User with you local user in the Dashboard bevor you can access it. Additional information: I set ``KOMODO_OIDC_USE_FULL_EMAIL=false`` I used some information from this issue to solve the problem: https://github.com/moghtech/komodo/issues/237