OAuth setup with Pocket ID

[purejamie]

Configuration Example

Pocket ID OIDC setup

Pocket ID is a simple OIDC provider that enables the use of passkeys (and only passkeys) for OIDC authentication.

To setup with Mealie, the following steps worked for me:

Pocket ID OIDC Client setup

1. Access the Pocket ID console and login
2. Click on the OIDC Clients option
3. Click on Add OIDC Client
4. Enter the callback URLs:

   https://[mealie address]/
   https://[mealie address]/login
   https://[mealie address]/login?direct=1

5. Enable PKCE by checking the box
6. Upload Mealie logo if so required

Pocket ID Groups setup

In my situation, I have two groups - family and admin. The family group contains anyone I want to access but not admin the server, the admin (guess what) has admin privs on the server.

1. Click on User Groups
2. Create the required groups (yours will likely be different to mine)

Mealie setup

Mealie requires OIDC options to be passed as environment variables, mine are set as below - take note of the comments as your requirements may differ:

# Enable OpenID Connect authentication
OIDC_AUTH_ENABLED: "True"             
# Allow new user registration through OIDC - CAREFUL
OIDC_SIGNUP_ENABLED: "True"         
# URL for the OIDC provider's configuration endpoint
OIDC_CONFIGURATION_URL: "OIDC Discovery URL from OIDC client in Pocket ID"         
# Client ID for the OIDC application
OIDC_CLIENT_ID: "Client ID form OIDC client in Pocket ID"         
# Client secret for the OIDC application
OIDC_CLIENT_SECRET: "Client Secret from OIDC client in Pocket ID"   
# Enable "remember me" functionality for OIDC login
OIDC_REMEMBER_ME: "True"         
# Default group for regular users **update this with the group for general users created above**
OIDC_USER_GROUP: "family"         
# Group name for administrative users
OIDC_ADMIN_GROUP: "admin"         
# Automatically redirect to OIDC login page
OIDC_AUTO_REDIRECT: "True"         
# Display name for the OIDC provider
OIDC_PROVIDER_NAME: "PocketID Auth"

[giacomofabbri]

Hi, I followed your guide and it seems to work, but after verification via PocketID I get "Wrong Credentials". Looking ad logs I get this error "[OIDC] Exception while creating user: Group Home does not exist; cannot create user", I setup correctly as you said but I may have forgotten something, could you please help me?
Thanks