UX when logged out

[shelldandy]

I was wondering if you had any suggestions on how to improve this UX (it may be something on my end misconfigured)

say for instance i protected whoami with tinyauth on traefik with authentik

my flow from logged out user would be:

- enters whoami domain
- gets transferred to tinyauth domain
- click generic oauth
- gets transferred to authentik to login
- gets tranferred to tinyauth logged in screen
- user then has to manually type in whoami domain again to finally access it

Is there a way we can go from logged out to logged in and in the same domain initially trying to get accessed?

[steveiliop56]

That's actually what's supposed to happen. When you login can you check if any cookies are set? It should set a tinyauth_redirect_uri

[shelldandy]

its the tinyauth url: https://tinyauth.domain/login?redirect_uri=https://tinyauth.domain

[steveiliop56]

What's your docker compose file?

[shelldandy]

The relevant bits are these:

  tinyauth:
    container_name: tinyauth
    image: ghcr.io/steveiliop56/tinyauth:latest
    environment:
      - SECRET=${TINYAUTH_SECRET}
      - APP_URL=https://${TINYAUTH_URL}
      - USERS=${TINYAUTH_USERS}
      - GENERIC_CLIENT_ID=${GENERIC_CLIENT_ID}
      - GENERIC_CLIENT_SECRET=${GENERIC_CLIENT_SECRET}
      - GENERIC_AUTH_URL=${GENERIC_AUTH_URL}
      - GENERIC_TOKEN_URL=${GENERIC_TOKEN_URL}
      - GENERIC_SCOPES=${GENERIC_SCOPES}
      - GENERIC_USER_URL=${GENERIC_USER_URL}
    labels:
      traefik.enable: true
      traefik.http.routers.tinyauth.rule: Host(`${TINYAUTH_URL}`)
      traefik.http.services.tinyauth.loadbalancer.server.port: 3000
      traefik.http.middlewares.tinyauth.forwardauth.address: https://${TINYAUTH_URL}/api/auth/traefik
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - frontend
      - authentik_network
  
  whoami:
    container_name: whoami
    image: traefik/whoami
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.whoami.rule=Host(`whoami.${DOMAIN}`)"
      - "traefik.http.routers.whoami.middlewares=tinyauth"
    networks:
      - frontend
    restart: unless-stopped

[steveiliop56]

Yeah the issue is your forward auth address. It should be http://tinyauth:3000/api/auth/traefik, you shouldn't change that.

[shelldandy]

Whoops silly me! I guess at some point i moved that around when i was trying to solve #29

Before reaching out and cutting a ticket.

I can see it works perfectly now!