if AUTHENTIK_USER_PREFIX is changed, the redirect URI policy also needs to be changed #106
Closed
opened 2026-08-10 14:18:58 +00:00 by amras
·
3 comments
No Branch/Tag Specified
main
renovate/nginx-1.x
kc_stable
mitigations_php
renovate/ghcr.io-nextcloud-releases-whiteboard-2.x
version_35
after-pr-143-cherry-pick
pr-143-review
renovate/docker.elastic.co-elasticsearch-elasticsearch-9.x
pr-125-v2
pr-125
renovate/mariadb-13.x
trusted-domains
renovate/pgautoupgrade-pgautoupgrade-18.x
pr-15.2.0+34.0.2-fpm
pr-14.2.0+33-fpm
fix-pgautoupgrade-max-connections
upload-limit
feature/imaginary
15.0.0+34.0.5-fpm
14.6.0+33-fpm
14.5.1+33.0.9-fpm
14.5.0+33.0.9-fpm
14.4.0+33.0.9-fpm
14.3.0+33.0.9-fpm
14.2.0+33.0.9-fpm
14.1.2+33.0.9-fpm
14.1.1+33.0.8-fpm
14.1.0+33.0.7-fpm
14.0.1+33.0.7-fpm
14.0.0+33.0.7-fpm
13.2.0+32-fpm
13.1.5+32.0.13-fpm
13.1.4+32.0.13-fpm
13.1.3+32.0.13-fpm
13.1.2+32.0.13-fpm
13.1.1+32.0.12-fpm
13.1.0+32.0.11-fpm
13.0.1+32.0.3-fpm
13.0.0+32.0.3-fpm
12.1.0+31.0.6-fpm
12.0.1+31.0.6-fpm
12.0.0+31.0.6-fpm
11.4.0+30.0.6-fpm
11.4.0+30.0.10-fpm
11.3.0+30.0.6-fpm
11.2.0+30.0.6-fpm
11.1.0+30.0.6-fpm
11.0.1+30.0.4-fpm
11.0.0+30.0.4-fpm
10.0.0+30.0.4-fpm
9.2.0+29.0.8-fpm
6.0.11+28.0.10-fpm
6.0.10+28.0.10-fpm
6.0.9+28.0.10-fpm
9.1.2+29.0.5-fpm
6.0.8+28.0.5-fpm
6.0.7+28.0.5-fpm
9.1.0+29.0.5-fpm
9.0.0+29.0.5-fpm
6.0.6+28.0.5-fpm
8.0.1+29.0.3-fpm
8.0.0+29.0.1-fpm
7.0.3+29.0.1-fpm
6.0.5+28.0.5-fpm
7.0.2+29.0.1-fpm
7.0.1+29.0.1-fpm
7.0.0+29.0.0-fpm
6.0.4+28.0.5-fpm
6.0.3+28.0.5-fpm
6.0.2+28.0.5-fpm
5.0.3+27.0.1-fpm
6.0.1+28.0.2-fpm
6.0.0+28.0.1-fpm
5.2.0+27.1.5-fpm
5.1.1+27.1.5-fpm
5.1.0+27.1.3-fpm
5.0.2+27.0.1-fpm
5.0.1+27.0.1-fpm
5.0.0+27.0.0-fpm
4.0.7+26.0.2-fpm
4.0.6+26.0.2-fpm
4.0.5+26.0.2-fpm
4.0.4+26.0.2-fpm
4.0.3+26.0.2-fpm
4.0.2+26.0.2-fpm
4.0.1+26.0.1-fpm
4.0.0+26.0.1-fpm
3.3.2+25.0.6-fpm
3.3.1+25.0.5-fpm
3.3.0+25.0.5-fpm
3.2.0+25.0.4-fpm
3.1.2+25.0.4-fpm
3.1.1+25.0.1-fpm
3.1.0+25.0.1-fpm
3.0.1+25.0.1-fpm
3.0.0+25.0.1-fpm
2.1.4+24.0.6-fpm
2.1.3+24.0.5-fpm
2.1.2+24.0.3-fpm
2.1.1+24.0.2-fpm
2.1.0+24.0.0-fpm
2.0.0+23.0.4-fpm
1.0.0+23.0.1-fpm
No labels
documentation
Milestone
No items
No Milestone
Assignees
3wordchant
aadil (Aadil Ayub)
abra-bot (Abra Bot)
ammaratef45
amras (Sarma)
BornDeleuze (Born Deleuze)
Brooke
carla
cas (Cassowary)
coopcloud
dannygroenewegen (Danny Groenewegen)
decentral1se (d1)
fauno (fauno)
ineiti (Linus Gasser)
javielico (Javielico)
jjsfunhouse
kawaiipunk (KawaiiPunk)
knoflook
moosemower
moritz
notplants
oxaliq (sorrel)
p4u1 (p4u1)
renovate-bot (Comrade Renovate Bot)
simon
stevensting (stevensting)
trav (Trav Fryer)
yksflip
Clear assignees
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: coop-cloud/nextcloud#106
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Ran into an issue:
with
AUTHENTIK_USER_PREFIX=fooWhen I navigate to https://nextcloud.example.com
I get redirected to authentik.example.com, with the redirect_uri set to
nextcloud.example.com/apps/sociallogin/custom_oidc/fooAnd see the error message:
To fix this, I need to go into my authentik admin panel, navigate to Applications > Providers, find the Nextcloud provider, click Edit and change the redirect URI from
.../authentikto.../foo. It took me some time to figure this out.My suggestion would be to remove AUTHENTIK_USER_PREFIX from the .env file, or provide a warning that it should usually not be changed.
I propose the warning in the
.envfile - specifically because I don't know how it got there :)I think we have old instances with a different user prefix that we still need to migrate. So the .env needs to stay there for a bit, but I agree on having a warning there.
Correct me if I'm wrong @moritz
Should be resolved by PR 136