hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Fix Authentik WIF client credentials
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Successful in 2m46s
Details
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details

Browse source
This commit is contained in:
Conrad Kramer 2026-06-07 13:07:34 -07:00
parent 8180c3c35a
commit e7c0442a12
6 changed files with 107 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Scripts/ci/google-wif-auth.sh
View file

@ -115,12 +115,13 @@ else
fi
token_endpoint="$(resolve_token_endpoint)"
curl -fsS \
-u "${authentik_client_id}:${authentik_client_secret}" \
-d grant_type=client_credentials \
-d client_id="$authentik_client_id" \
-d client_secret="$authentik_client_secret" \
-d scope="openid profile email groups" \
-d audience="$authentik_audience" \
"$token_endpoint" \
| jq -r '.id_token // empty' > "$token_path"
| jq -r '.id_token // .access_token // empty' > "$token_path"
fi
chmod 0600 "$token_path"