Skip to content

Logout from nextcloud hangs (spinning circle) #328

Description

@mtissington

I have configure nextcloud with authelia.

Login works great but logout hangs.

   'allow_user_to_change_display_name' => false,
    'lost_password_link' => 'disabled',
    'oidc_login_provider_url' => 'https://auth.example.com',
    'oidc_login_client_id' => 'nextcloud',
    'oidc_login_client_secret' => 'secret',
    'oidc_login_auto_redirect' => true,
    'oidc_login_end_session_redirect' => false,
    'oidc_login_button_text' => 'Log in with Authelia',
    'oidc_login_hide_password_form' => true,
    'oidc_login_use_id_token' => false,
    'oidc_login_attributes' => array (
        'id' => 'preferred_username',
        'name' => 'name',
        'mail' => 'email',
        'groups' => 'groups',
        'is_admin' => 'is_nextcloud_admin',
    ),
    'oidc_login_default_group' => 'oidc',
    'oidc_login_use_external_storage' => false,
    'oidc_login_scope' => 'openid profile email groups nextcloud_userinfo',
    'oidc_login_proxy_ldap' => false,
    'oidc_login_disable_registration' => true,
    'oidc_login_logout_url' => 'https://cloud.example.com/apps/oidc_login/oidc',
    'oidc_login_redir_fallback' => false,
    'oidc_login_tls_verify' => true,
    'oidc_create_groups' => false,
    'oidc_login_webdav_enabled' => false,
    'oidc_login_password_authentication' => false,
    'oidc_login_public_key_caching_time' => 86400,
    'oidc_login_min_time_between_jwks_requests' => 10,
    'oidc_login_well_known_caching_time' => 86400,
    'oidc_login_update_avatar' => false,
    'oidc_login_code_challenge_method' => 'S256',
definitions:
  user_attributes:
    is_nextcloud_admin:
      ## Expression to evaluate admin privilege for Nextcloud.
      expression: '"nextcloud-admins" in groups'

server: 
  address: tcp://:9091
log:
  level: debug
  file_path: /var/log/authelia/authelia.log
identity_validation:
  reset_password:
    jwt_secret: 'secret'

identity_providers:
  oidc:
    enable_client_debug_messages: true
    hmac_secret: 'secret'
    jwks:
      - key_id: 'cloud'
        use: 'sig'
        algorithm: 'RS256'
        key: |
          -----BEGIN PRIVATE KEY-----
          .....
          -----END PRIVATE KEY-----

    claims_policies:
      nextcloud_userinfo:
        custom_claims:
          is_nextcloud_admin: {}

    scopes:
      nextcloud_userinfo:
        claims:
          - 'is_nextcloud_admin'

    ## The other portions of the mandatory OpenID Connect 1.0 configuration go here.
    ## See: https://www.authelia.com/c/oidc
    clients:
      - client_id: 'nextcloud'
        client_name: 'nextcloud'
        client_secret: 'secret'
        public: false
        authorization_policy: 'two_factor'
        require_pkce: true
        pkce_challenge_method: 'S256'
        claims_policy: 'nextcloud_userinfo'
        redirect_uris:
          - 'https://cloud.example.com/apps/oidc_login/oidc'
        scopes:
          - 'openid'
          - 'profile'
          - 'email'
          - 'groups'
          - 'nextcloud_userinfo'
        response_types:
          - 'code'
        grant_types:
          - 'authorization_code'
        access_token_signed_response_alg: 'none'
        userinfo_signed_response_alg: 'none'
        token_endpoint_auth_method: 'client_secret_basic'
        consent_mode: implicit
totp:
  issuer: example.com
  period: 30
  skew: 0
authentication_backend:
  file:
    path: /etc/authelia/users.yml
    password: 
      algorithm: argon2id
      iterations: 1
      key_length: 32
      salt_length: 16
      memory: 512
      parallelism: 2
access_control:
  default_policy: deny
  rules:
    - domain:
      - auth.example.com
      policy: bypass
    - domain:
      - cloud.example.com
      - photos.example.com
      policy: two_factor
session:
  secret: 'secret'
  cookies:
    - domain: 'example.com'
      authelia_url: 'https://auth.example.com'
      default_redirection_url: 'https://cloud.example.com'
      name: 'authelia_session'
regulation:
  max_retries: 3
  find_time: 2m
  ban_time: 5m
storage:
  encryption_key: 'secret'
  local:
    path: /etc/authelia/db.sqlite3
notifier:
  smtp:
    ...

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions