diff --git a/docs/docs/administration/img/google-example.webp b/docs/docs/administration/img/google-example.webp new file mode 100644 index 0000000000..742e77cd37 Binary files /dev/null and b/docs/docs/administration/img/google-example.webp differ diff --git a/docs/docs/administration/img/immich-google-example.webp b/docs/docs/administration/img/immich-google-example.webp new file mode 100644 index 0000000000..ed6c31432d Binary files /dev/null and b/docs/docs/administration/img/immich-google-example.webp differ diff --git a/docs/docs/administration/oauth.md b/docs/docs/administration/oauth.md index 6fcc47d6a4..2ee84970df 100644 --- a/docs/docs/administration/oauth.md +++ b/docs/docs/administration/oauth.md @@ -110,8 +110,44 @@ Immich has a route (`/api/oauth/mobile-redirect`) that is already configured to ## Example Configuration +
+Authentik Example + +### Authentik Example + Here's an example of OAuth configured for Authentik: -![OAuth Settings](./img/oauth-settings.png) + + +
+ +
+Google Example + +### Google Example + +Configuration of Authorised redirect URIs (Google Console) + + + +Configuration of OAuth in System Settings + +| Setting | Value | +| ---------------------------- | ------------------------------------------------------------------------------------------------------ | +| Issuer URL | [https://accounts.google.com](https://accounts.google.com) | +| Client ID | 7\***\*\*\*\*\*\*\***\*\*\***\*\*\*\*\*\*\***vuls.apps.googleusercontent.com | +| Client Secret | G\***\*\*\*\*\*\*\***\*\*\***\*\*\*\*\*\*\***OO | +| Scope | openid email profile | +| Signing Algorithm | RS256 | +| Storage Label Claim | preferred_username | +| Storage Quota Claim | immich_quota | +| Default Storage Quota (GiB) | 0 (0 for unlimited quota) | +| Button Text | Sign in with Google (optional) | +| Auto Register | Enabled (optional) | +| Auto Launch | Enabled | +| Mobile Redirect URI Override | Enabled (required) | +| Mobile Redirect URI | [https://demo.immich.app/api/oauth/mobile-redirect](https://demo.immich.app/api/oauth/mobile-redirect) | + +
[oidc]: https://openid.net/connect/