AYEEDITYA Posts - Answer Overflow

AYEEDITYA

Explore posts from servers

•Created by AYEEDITYA on 3/26/2025 in #💬・get-help

Exporting dashboard config

Hey Yall, Is there a way I can export my dashboard config in case I’m messing around with let’s say OIDC? seems like currently everything is in the same database so if I need to make changes to my OIDC and that breaks something I have to completely wipe the DB starting the dashboards from scratch as well

5 replies

HHomarr

•Created by AYEEDITYA on 3/25/2025 in #💬・get-help

SSO/OIDC with Zitadel

Hey yall, I racked my brain for a very long time on why zitadel was not passing roles to homarr which meant I could not create an admin user, well I have found the reason and solution, so this is more for people with my own setup which is homarr 1.0+ along with Zitadel for SSO. The simple reason why Homarr does not like Zitadel is seemingly homarr only supports flat roles whereas Zitadel traverses a complex role json structure. Here is how I got it working: Adding Zitadel SSO to homarr Zitadel setup: - Create application - Web + Basic Auth - Redirect URIs: - https://home.domain.com/api/auth/callback/oidc - Token Settings: - Bearer Token -> User Roles inside ID Token -> User Info inside ID Token - Create a zitadel action: - name: onlyRoles

function onlyRoles(ctx, api) {
  if (ctx.v1.user.grants == undefined || ctx.v1.user.grants.count == 0) {
    return;
  }

  let grants = [];
  ctx.v1.user.grants.grants.forEach(claim => {
    claim.roles.forEach(role => {
        grants.push(role)  
    })
  })

  api.v1.claims.setClaim('my:zitadel:grants', grants)
}

function onlyRoles(ctx, api) {
  if (ctx.v1.user.grants == undefined || ctx.v1.user.grants.count == 0) {
    return;
  }

  let grants = [];
  ctx.v1.user.grants.grants.forEach(claim => {
    claim.roles.forEach(role => {
        grants.push(role)  
    })
  })

  api.v1.claims.setClaim('my:zitadel:grants', grants)
}

- Flows -> Complement Token -> Pre UserInfo Creation + Pre Access Token Creation - Add admin role to zitadel and assign user to it, in my case role and key were both called "admin" Add OIDC client and secret to homarr (docker compose environment variables):

     AUTH_PROVIDERS: oidc #credentials
      AUTH_OIDC_ISSUER: https://auth.domain.com
      AUTH_OIDC_CLIENT_SECRET: some-nasty-secret
      AUTH_OIDC_CLIENT_ID: client-id-hehe
      AUTH_OIDC_CLIENT_NAME: Zitadel
      AUTH_OIDC_SCOPE_OVERWRITE: "openid email profile"
      AUTH_OIDC_GROUPS_ATTRIBUTE: "my:zitadel:grants"

     AUTH_PROVIDERS: oidc #credentials
      AUTH_OIDC_ISSUER: https://auth.domain.com
      AUTH_OIDC_CLIENT_SECRET: some-nasty-secret
      AUTH_OIDC_CLIENT_ID: client-id-hehe
      AUTH_OIDC_CLIENT_NAME: Zitadel
      AUTH_OIDC_SCOPE_OVERWRITE: "openid email profile"
      AUTH_OIDC_GROUPS_ATTRIBUTE: "my:zitadel:grants"

Startup homarr Enter admin group name in homarrs web ui: "admin" login with Zitadel and you are an admin, woooo

5 replies

HHomarr

•Created by AYEEDITYA on 1/28/2025 in #💬・get-help

Homarr SSO W/ Zitadel

2 replies

Gaming

Programming