From 8e7c0ad9e3366742970b8ca8c70483fa404b6e3b Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Sun, 15 Mar 2026 11:30:00 +0100 Subject: [PATCH] oidc vault config change authentik3 --- authentik/blueprint-vault-oidc.yaml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/authentik/blueprint-vault-oidc.yaml b/authentik/blueprint-vault-oidc.yaml index b17d10e..a236457 100644 --- a/authentik/blueprint-vault-oidc.yaml +++ b/authentik/blueprint-vault-oidc.yaml @@ -17,12 +17,15 @@ data: name: Vault authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]] + invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]] client_type: confidential client_id: vault client_secret: !Env [VAULT_OIDC_CLIENT_SECRET, ""] - redirect_uris: |- - https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback - http://localhost:8250/oidc/callback + redirect_uris: + - matching_mode: strict + url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback + - matching_mode: strict + url: http://localhost:8250/oidc/callback signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]] property_mappings: - !Find [authentik_providers_oauth2.scopemapping, [managed, goauthentik.io/providers/oauth2/scope-openid]]