OIDC Configuration Question #389

New Issue

OVERLORD · 2026-02-04T18:57:29+03:00

OVERLORD commented

2026-02-04 18:57:29 +03:00

Originally created by @xionous on GitHub (Nov 24, 2023).

Has anyone gotten the OIDC to work with Authelia?

The error that I am getting is Authelia is complaining that it isn't getting a "state":

level=error msg="Authorization Request failed with error: The state is missing or does not have enough characters and is therefore considered too weak. Request parameter 'state' must be at least be 8 characters long to ensure sufficient entropy."

Planka

      - OIDC_ISSUER=https://auth.domain
      - OIDC_CLIENT_ID=planka
      - OIDC_CLIENT_SECRET=super_secret
      - OIDC_SCOPES=openid profile email
      - OIDC_ADMIN_ROLES=planka_admin
      - OIDC_ROLES_ATTRIBUTE=groups

Authelia

      - id: planka
        description: Planka Kanban
        secret: super_secret
        sector_identifier: domain
        public: false
        authorization_policy: two_factor
        pre_configured_consent_duration: 1M
        audience: []
        scopes:
          - openid
          - email
          - profile
        redirect_uris:
          - https://planka.domain/oidc-callback
        userinfo_signing_algorithm: none

Originally created by @xionous on GitHub (Nov 24, 2023). Has anyone gotten the OIDC to work with Authelia? The error that I am getting is Authelia is complaining that it isn't getting a "state": `level=error msg="Authorization Request failed with error: The state is missing or does not have enough characters and is therefore considered too weak. Request parameter 'state' must be at least be 8 characters long to ensure sufficient entropy."` Planka ``` - OIDC_ISSUER=https://auth.domain - OIDC_CLIENT_ID=planka - OIDC_CLIENT_SECRET=super_secret - OIDC_SCOPES=openid profile email - OIDC_ADMIN_ROLES=planka_admin - OIDC_ROLES_ATTRIBUTE=groups ``` Authelia ``` - id: planka description: Planka Kanban secret: super_secret sector_identifier: domain public: false authorization_policy: two_factor pre_configured_consent_duration: 1M audience: [] scopes: - openid - email - profile redirect_uris: - https://planka.domain/oidc-callback userinfo_signing_algorithm: none ```

OVERLORD added the help wanted label 2026-02-04 18:57:29 +03:00

OVERLORD closed this issue

2026-02-04 18:57:34 +03:00

OVERLORD commented

2026-02-04 18:57:37 +03:00

@meltyshev commented on GitHub (Nov 24, 2023):

Probably we can add a state parameter, just need to check first if it will affect other providers. But it's weird that Authelia doesn't work without it, since it should be optional.

@meltyshev commented on GitHub (Nov 24, 2023): Probably we can add a state parameter, just need to check first if it will affect other providers. But it's weird that Authelia doesn't work without it, since it should be optional.

OVERLORD commented

2026-02-04 18:57:46 +03:00

@xionous commented on GitHub (Nov 25, 2023):

My understanding is having the state parameter is a security best practice, so perhaps that is why. I would think that adding it would not interfere with other providers.

@xionous commented on GitHub (Nov 25, 2023): My understanding is having the state parameter is a security best practice, so perhaps that is why. I would think that adding it would not interfere with other providers.

OVERLORD commented

2026-02-04 18:58:00 +03:00

@Bykow commented on GitHub (Dec 5, 2023):

I'm having a similar issue with authelia.

update: previous error fixed, now looking at same issue:
level=error msg="Authorization Request failed with error: The state is missing or does not have enough characters and is therefore considered too weak. Request parameter 'state' must be at least be 8 characters long to ensure sufficient entropy."

@Bykow commented on GitHub (Dec 5, 2023): I'm having a similar issue with authelia. update: previous error fixed, now looking at same issue: `level=error msg="Authorization Request failed with error: The state is missing or does not have enough characters and is therefore considered too weak. Request parameter 'state' must be at least be 8 characters long to ensure sufficient entropy."`

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/planka#389