starred/audiobookshelf-app
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf-app.git synced 2026-07-27 15:08:40 +02:00
Code Issues 454 Packages Projects Releases 10 Wiki Activity

[Bug]: OIDC with Authelia #1238

New Issue
Closed
opened 2026-04-24 23:54:51 +02:00 by adam · 2 comments
adam commented 2026-04-24 23:54:51 +02:00
Owner
Copy Link
Copy Source

Originally created by @Al4ndil on GitHub (Jul 4, 2025).

I have verified that the bug is not already awaiting release

Yes

What was the Problem?

Audiobookshelf 2.25.1 (docker)
Authelia (docker)

Hi

I use the standard OIDC configurations provided on both the Authelia and Audiobookshelf sides.

I manage to connect to the Audiobookshelf server via my browser (Opera).

I can't connect via the Android application.

I get the following message on the app:
"Server redirected somewhere else (to authelia.XXX.duckdns.org)

In the Authelia logs, I have:
{"level": "debug", "msg": "Check authorization of subject username= groups= ip=10.0.0.131 and object https://audiobookshelf.XXX.duckdns.org//status (method GET).", "time": "2025-07-04T14:23:21+02:00"}
{“level”: “info”, “method”: “GET”, ‘msg’: "Access to https://audiobookshelf.XXX.duckdns.org//status (method GET) is not authorized to user \u003canonymous\u003e, responding with status code 401 with location redirect to https://authelia. XXX.duckdns.org/?rd=https%3A%2F%2Faudiobookshelf.XXX.duckdns.org%2F%2Fstatus\u0026rm=GET“,”path“:”/api/authz/auth-request“,”remote_ip“:”10.0.0.131“,‘time’:”2025-07-04T14:23:21+02:00"}

This seems normal since I can't enter a login and password...

I don't know what I'm doing wrong... I've checked everything several times but I may have missed something.

Thx a lot for your help

Steps to Reproduce the Issue

Standard set-up of OIDC with Authelia following the procedures
Attempt to connect with the Android app

What was Expected?

Access the authentication window (browser?) to enter the Authelia login and password and access the server

Phone Model

Samsung Galaxy S25

Phone OS

Android 15

Audiobookshelf App Version

Android App - 0.9.81

Installation Source

Google Play Store

Additional Notes

No response

Originally created by @Al4ndil on GitHub (Jul 4, 2025). ### I have verified that the [bug is not already awaiting release](https://github.com/advplyr/audiobookshelf-app/issues?q=is%3Aissue%20label%3A%22awaiting%20release%22) Yes ### What was the Problem? Audiobookshelf 2.25.1 (docker) Authelia (docker) Hi I use the standard OIDC configurations provided on both the Authelia and Audiobookshelf sides. I manage to connect to the Audiobookshelf server via my browser (Opera). I can't connect via the Android application. I get the following message on the app: "Server redirected somewhere else (to authelia.XXX.duckdns.org) In the Authelia logs, I have: {"level": "debug", "msg": "Check authorization of subject username= groups= ip=10.0.0.131 and object https://audiobookshelf.XXX.duckdns.org//status (method GET).", "time": "2025-07-04T14:23:21+02:00"} {“level”: “info”, “method”: “GET”, ‘msg’: "Access to https://audiobookshelf.XXX.duckdns.org//status (method GET) is not authorized to user \u003canonymous\u003e, responding with status code 401 with location redirect to https://authelia. XXX.duckdns.org/?rd=https%3A%2F%2Faudiobookshelf.XXX.duckdns.org%2F%2Fstatus\u0026rm=GET“,”path“:”/api/authz/auth-request“,”remote_ip“:”10.0.0.131“,‘time’:”2025-07-04T14:23:21+02:00"} This seems normal since I can't enter a login and password... I don't know what I'm doing wrong... I've checked everything several times but I may have missed something. Thx a lot for your help ### Steps to Reproduce the Issue Standard set-up of OIDC with Authelia following the procedures Attempt to connect with the Android app ### What was Expected? Access the authentication window (browser?) to enter the Authelia login and password and access the server ### Phone Model Samsung Galaxy S25 ### Phone OS Android 15 ### Audiobookshelf App Version Android App - 0.9.81 ### Installation Source Google Play Store ### Additional Notes _No response_
adam added the bug label 2026-04-24 23:54:51 +02:00
adam closed this issue 2026-04-24 23:54:52 +02:00
adam commented 2026-04-24 23:54:53 +02:00
Author
Owner
Copy Link
Copy Source

@rusozoll commented on GitHub (Jul 8, 2025):

@Al4ndil I've seen a few other posts from you while running this down myself. I think I have a work config, prompts for 2fa as expected, via the web interface or the app.

The key problem that you (and I was) hitting is that the webapp needs to be able to talk to the login page in the app. I modified my Authelia access control section as such, mostly per other reddit posts. I may have additional resources exposed, but it seems to be happy. This is my complete (sanitized) access_control section:

access_control:
default_policy: deny
rules:

  • domain: 'audiobookshelf.yoursite.tld'
    policy: 'bypass'
    resources:
    • "^/socket.io([/?].*)?$"
    • "^/api([/?].*)?$"
    • "^/ping([/?].*)?$"
    • "^/webapi([/?].*)?$"
    • "^/login([/?].*)?$"
    • "^/status([/?].*)?$"
    • "^/auth([/?].*)?$"
  • domain:
    • yoursite.tld
    • "*.yoursite.tld"
      policy: two_factor

@Entepotenz (Tagging since this topic is duplicated in Authelia's repo on your config)

@rusozoll commented on GitHub (Jul 8, 2025): @Al4ndil I've seen a few other posts from you while running this down myself. I think I have a work config, prompts for 2fa as expected, via the web interface or the app. The key problem that you (and I was) hitting is that the webapp needs to be able to talk to the login page in the app. I modified my Authelia access control section as such, mostly per other reddit posts. I may have additional resources exposed, but it seems to be happy. This is my complete (sanitized) access_control section: access_control: default_policy: deny rules: - domain: 'audiobookshelf.yoursite.tld' policy: 'bypass' resources: - "^/socket.io([/?].*)?$" - "^/api([/?].*)?$" - "^/ping([/?].*)?$" - "^/webapi([/?].*)?$" - "^/login([/?].*)?$" - "^/status([/?].*)?$" - "^/auth([/?].*)?$" - domain: - yoursite.tld - "*.yoursite.tld" policy: two_factor @Entepotenz (Tagging since this topic is duplicated in Authelia's repo on your config)
adam commented 2026-04-24 23:54:53 +02:00
Author
Owner
Copy Link
Copy Source

@nichwall commented on GitHub (Jul 8, 2025):

More conversation in https://github.com/advplyr/audiobookshelf-app/issues/1155#issuecomment-2031674669 about why forward authentication does not (and will not) work

@nichwall commented on GitHub (Jul 8, 2025): More conversation in https://github.com/advplyr/audiobookshelf-app/issues/1155#issuecomment-2031674669 about why forward authentication does not (and will not) work
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
android
android auto
backlog
bug
enhancement
ereader
help wanted
iOS
progress sync
pull-request
Mirrored from GitHub Pull Request
 sleep timer
unable to reproduce
waiting
No labels bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf-app#1238