if AUTHENTIK_USER_PREFIX is changed, the redirect URI policy also needs to be changed #106

Open
opened 2026-08-10 14:18:58 +00:00 by amras · 1 comment
Owner

Ran into an issue:

with AUTHENTIK_USER_PREFIX=foo

When I navigate to https://nextcloud.example.com

I get redirected to authentik.example.com, with the redirect_uri set to nextcloud.example.com/apps/sociallogin/custom_oidc/foo

And see the error message:

The request fails due to a missing, invalid, or mismatching redirection URI (redirect_uri).

To fix this, I need to go into my authentik admin panel, navigate to Applications > Providers, find the Nextcloud provider, click Edit and change the redirect URI from .../authentik to .../foo. It took me some time to figure this out.


My suggestion would be to remove AUTHENTIK_USER_PREFIX from the .env file, or provide a warning that it should usually not be changed.

Ran into an issue: with `AUTHENTIK_USER_PREFIX=foo` When I navigate to https://nextcloud.example.com I get redirected to authentik.example.com, with the redirect_uri set to `nextcloud.example.com/apps/sociallogin/custom_oidc/foo` And see the error message: ``` The request fails due to a missing, invalid, or mismatching redirection URI (redirect_uri). ``` To fix this, I need to go into my authentik admin panel, navigate to Applications > Providers, find the Nextcloud provider, click Edit and change the redirect URI from `.../authentik` to `.../foo`. It took me some time to figure this out. --- My suggestion would be to remove AUTHENTIK_USER_PREFIX from the .env file, or provide a warning that it should usually not be changed.
amras added the documentation label 2026-08-10 14:18:58 +00:00
Owner

I propose the warning in the .env file - specifically because I don't know how it got there :)

I propose the warning in the `.env` file - specifically because I don't know how it got there :)
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coop-cloud/nextcloud#106