diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md index 411af3c00..be677d614 100644 --- a/CONTRIBUTORS.md +++ b/CONTRIBUTORS.md @@ -28,6 +28,7 @@ - Sebastiano Tocci(Seba-T) - Minh Phan (MinhPhan8803) - Kenton Groombridge (0xC0ncord) +- Martin Weinelt (hexa) ## Acknowledgements diff --git a/book/src/integrations/oauth2.md b/book/src/integrations/oauth2.md index ece179e33..f69ba6ae0 100644 --- a/book/src/integrations/oauth2.md +++ b/book/src/integrations/oauth2.md @@ -262,6 +262,23 @@ In the virtual host, to protect a location: ``` +### Miniflux + +Miniflux is a feedreader that supports OAuth 2.0 and OpenID connect. It automatically appends +the `.well-known` parts to the discovery endpoint. The application name in the redirect URL +needs to match the `OAUTH2_PROVIDER` name. + +``` +OAUTH2_PROVIDER = "kanidm"; +OAUTH2_CLIENT_ID = "miniflux"; +OAUTH2_CLIENT_SECRET = ""; +OAUTH2_REDIRECT_URL = "https://feeds.example.com/oauth2/kanidm/callback"; +OAUTH2_OIDC_DISCOVERY_ENDPOINT = "https://idm.example.com/oauth2/openid/"; +```` + +Currently Miniflux [does not support PKCE](https://github.com/miniflux/v2/issues/1910) and Kanidm will +prevent logins until you [disable PKCE](#extended-options-for-legacy-clients) for the resource server. + ### Nextcloud Install the module [from the nextcloud market place](https://apps.nextcloud.com/apps/user_oidc) - it