OIDC with Zitadel not working

[zmbcgn]

OIDC with Zitadel not working

[xet7]

@zmbcgn

• OAUTH2_LOGIN_STYLE=redirect

redirect does not currently work. Only popup works.

Also, change this:

- OAUTH2_ID_MAP=preferred_username
- OAUTH2_USERNAME=preferred_username

To this:

- OAUTH2_ID_MAP=sub
- OAUTH2_USERNAME_MAP=email

[zmbcgn]

please remove my domain from the wiki article. thx.

[xet7]

@zmbcgn

I removed your domain. Thanks!

[zmbcgn]

cool. that fixed it.

for the record, if somebody has this issue: it is OAUTH2_USERNAME_MAP.

may i ask what "sub" stands for? and why i cannot use preferred_username as username?

[xet7]

@zmbcgn

Sub is per-user unique ID, used in login, like 1234abcd. preferred_username probably is not unique, there could be persons with same names.

https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes

https://stackoverflow.com/questions/52876679/the-sub-claim-value-is-different-between-access-and-id-tokens#52877830

https://github.com/wekan/wekan/wiki/Google-login

[xet7]

I added this Zitadel login to wiki: https://github.com/wekan/wekan/wiki/Zitadel