starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-05-30 23:40:40 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

[Bug]: OIDC auth via mobile #3052

New Issue
Closed
opened 2026-04-25 00:13:18 +02:00 by adam · 3 comments
adam commented 2026-04-25 00:13:18 +02:00
Owner
Copy Link
Copy Source

Originally created by @jonrasp on GitHub (Oct 23, 2025).

What happened?

I've configured ABS behind Caddy. It uses Authelia as an OIDC server (on a differnet host behind a different instance of Caddy).
When logging into te ABS via web browser, OIDC works perfectly.
I'm trying some mobile apps on iOS, I've tried LittleApeAudioPlayer and SoundLeaf. These will connect to my ABS server if I use local auth, but they won't connect using OIDC auth. When I try a valid OIDC user, the ABS logs return:
[2025-10-23 20:14:37.199] ERROR: [LocalAuth] Failed login attempt for username "jon" from ip 192.168.0.145 (User has no password set. Might have been created with OpenID).

I'm assuming that because ABS is working as a proxy, any ABS compatible app will use the OIDC functionality.

What did you expect to happen?

OIDC user should authenticate in the same way as a local user

Steps to reproduce the issue

  1. Install ABS behind Caddy
  2. Install Authelia behind Caddy
  3. To prove connectivity, log into the instance of ABS using one of the OIDC users
  4. Install an ABS client onto iOS
  5. Attempt to log in using one of the OIDC credentials

Audiobookshelf version

2.3.0

How are you running audiobookshelf?

Docker

What OS is your Audiobookshelf server hosted from?

Linux

If the issue is being seen in the UI, what browsers are you seeing the problem on?

None

Logs

[2025-10-23 20:14:37.199] ERROR: [LocalAuth] Failed login attempt for username "jon" from ip 192.168.0.145 (User has no password set. Might have been created with OpenID).

Additional Notes

I've reviewed this bug https://github.com/advplyr/audiobookshelf/issues/3069 which is also to do with OIDC on mobile, but it didn't help.

Authelia configuration includes these:
redirect_uris:
- 'https://audiobooks.mydomain/auth/openid/callback'
- 'https://audiobooks.mydomain/auth/openid/mobile-redirect'

Within ABS, the redirect is set to allow all (*).

Originally created by @jonrasp on GitHub (Oct 23, 2025). ### What happened? I've configured ABS behind Caddy. It uses Authelia as an OIDC server (on a differnet host behind a different instance of Caddy). When logging into te ABS via web browser, OIDC works perfectly. I'm trying some mobile apps on iOS, I've tried LittleApeAudioPlayer and SoundLeaf. These will connect to my ABS server if I use local auth, but they won't connect using OIDC auth. When I try a valid OIDC user, the ABS logs return: [2025-10-23 20:14:37.199] ERROR: [LocalAuth] Failed login attempt for username "jon" from ip 192.168.0.145 (User has no password set. Might have been created with OpenID). I'm assuming that because ABS is working as a proxy, any ABS compatible app will use the OIDC functionality. ### What did you expect to happen? OIDC user should authenticate in the same way as a local user ### Steps to reproduce the issue 1. Install ABS behind Caddy 2. Install Authelia behind Caddy 3. To prove connectivity, log into the instance of ABS using one of the OIDC users 4. Install an ABS client onto iOS 5. Attempt to log in using one of the OIDC credentials ### Audiobookshelf version 2.3.0 ### How are you running audiobookshelf? Docker ### What OS is your Audiobookshelf server hosted from? Linux ### If the issue is being seen in the UI, what browsers are you seeing the problem on? None ### Logs ```shell [2025-10-23 20:14:37.199] ERROR: [LocalAuth] Failed login attempt for username "jon" from ip 192.168.0.145 (User has no password set. Might have been created with OpenID). ``` ### Additional Notes I've reviewed this bug https://github.com/advplyr/audiobookshelf/issues/3069 which is also to do with OIDC on mobile, but it didn't help. Authelia configuration includes these: redirect_uris: - 'https://audiobooks.mydomain/auth/openid/callback' - 'https://audiobooks.mydomain/auth/openid/mobile-redirect' Within ABS, the redirect is set to allow all (*).
adam added the bug label 2026-04-25 00:13:18 +02:00
adam closed this issue 2026-04-25 00:13:18 +02:00
adam commented 2026-04-25 00:13:19 +02:00
Author
Owner
Copy Link
Copy Source

@Vito0912 commented on GitHub (Oct 23, 2025):

I maintain a list of clients
https://abstoolbox.vito0912.de/clients

Last time I checked Soundleaf did not support OIDC. Are you sure that it meanwhile supports it?

If not then ofc a user created through OIDC cannot be used for local Auth unless a password is set.

Also did you make a typo in the server version?

Edit: Because Local Auth indicates the app does not support OIDC. If so, please close the issue here and create/upvote issues in the client repositories. Only they can implement it

@Vito0912 commented on GitHub (Oct 23, 2025): I maintain a list of clients https://abstoolbox.vito0912.de/clients Last time I checked Soundleaf did not support OIDC. Are you sure that it meanwhile supports it? If not then ofc a user created through OIDC cannot be used for local Auth unless a password is set. Also did you make a typo in the server version? Edit: Because Local Auth indicates the app does not support OIDC. If so, please close the issue here and create/upvote issues in the client repositories. Only they can implement it
adam commented 2026-04-25 00:13:19 +02:00
Author
Owner
Copy Link
Copy Source

@nichwall commented on GitHub (Oct 23, 2025):

Like Vito said, every individual client must implement OIDC on their own to authenticate with the Audiobookshelf server using OIDC.

I just looked at the Soundleaf GH and the LittleApeAudioPlayer release notes and it looks like neither have implemented OIDC yet.

@nichwall commented on GitHub (Oct 23, 2025): Like Vito said, every individual client must implement OIDC on their own to authenticate with the Audiobookshelf server using OIDC. I just looked at the Soundleaf GH and the LittleApeAudioPlayer release notes and it looks like neither have implemented OIDC yet.
adam commented 2026-04-25 00:13:19 +02:00
Author
Owner
Copy Link
Copy Source

@jonrasp commented on GitHub (Oct 24, 2025):

Thanks both. Wasn't clear whether the client had to explicitly support OIDC but it does. I shall close this.

@jonrasp commented on GitHub (Oct 24, 2025): Thanks both. Wasn't clear whether the client had to explicitly support OIDC but it does. I shall close this.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
authentication
backlog
bug
chapter editor
config-issue
ebooks
encoding/embedding
enhancement
help wanted
listening sessions & progress
planned
possible plugin
progress sync
pull-request
Mirrored from GitHub Pull Request
 sorting/filtering/searching
unable to reproduce
upload
users & permissions
waiting
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#3052
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?