Pocket ID (OIDC) giúp đăng nhập app nội mạng nhưng cần cấu hình DNS đơn. Mong nhắc thêm DNS 192.168.10.1 và 9.9.9.9 trong docker compose để app lan như immich hoạt hiệu. #OIDC #PocketID #Docker #Selfhosted #LAN #VietnameseTech

https://www.reddit.com/r/selfhosted/comments/1o9r2cl/use_oidc_provider_pocket_id_on_the_internet_to/

Câu hỏi về cách dụng OIDC (Pocket ID) cho app LAN như Immich. Có thể không karena callback URL chỉ trên mạng nội bộ. Need giải pháp! #OIDC #PocketID #Immich #LAN #Selfhosted #Authentication #Vietnam

https://www.reddit.com/r/selfhosted/comments/1o9r2cl/use_oidc_provider_pocket_id_on_the_internet_to/

Implement a secure MCP OAuth desktop client using OAuth and Entra ID

The article demonstrates how to implement a secure MCP OAuth desktop client using Microsoft Entra ID. The MCP server is built with ASP.NET Core and secured using Microsoft Entra ID. The MCP client …

Software Engineering

I just learned how to use NixOS unstable service instead of stable:

```nix
{ inputs, unstable, ... }:

{
disabledModules = [
"services/security/pocket-id.nix"
];

imports = [
"${inputs.nixpkgs-unstable}/nixos/modules/services/security/pocket-id.nix"
];

services.pocket-id = {
enable = true;
package = unstable.pocket-id;
};
}
```

Thanks @mike showing it!

Nice article about this: https://lgug2z.com/articles/selectivey-using-service-modules-from-nixos-unstable/

#NixOS #unstable #SeampleHack #PocketID #OIDC #idp

Selectively Using Service Modules from NixOS Unstable

A few weeks ago I ran nix flake update to get the latest versions of CLI tools that I regularly use from nixos-unstable. atuin is one of those tools which I started using relatively recently and quickly became a huge fan of. I run it on all of my machines, and I can’t overstate how amazing it is to have all of my shell history across all of my machines synced. I also self-host the atuin server, because why not?

LGUG2Z
@sozialwelten @grindhold I'm in the mainhale so I couldn't join the talk :( Just would like to mention that I would be really happy if #OIDC gets integrated into #Flohmarkt :P ;D
Using Codeberg, Gitea, or Forgejo as OIDC provider for Tailscale

Requirements An account on Codeberg, Gitea instance, or Forgejo instance. A domain name. E.g., I use moonshadow.dev. The primary email address on your Codeberg, Gitea, or Forgejo account must be from the above domain name. E.g., mine is hyperreal@moonshadow.dev. A publicly accessible web server to host your webfinger file. You could also use Codeberg pages for this with your custom domain. The web server must serve content at your domain. E.g., https://moonshadow.dev. Webfinger In the web root of your web server, create the .well-known/webfinger file. For example, on mine, I have the following:

hyperreal's interwebzlog

Well scratch that #Zitadel upgrade. I thought I was using a versioned tag in my #DockerCompose file but I'm actually using latest. As such I've been running 4.x since it was released! 

#selfhosted #selfhosting #OIDC #IdP #software

I'd like to see if I can upgrade to #Zitadel 4.x today without blowing anything else up  

#authentication #OIDC #Tailscale #selfhosting #selfhosted #selfhost #IdP

@kiol im using #pocketid to log in to my apps (if they are using #oidc), so I have everything there (in my apps section). If app doesn’t support oidc is there anyway, so instead of bookmarks I have everything there.
Turns out Microsoft Entra does not follow the #OIDC specification either. It rejects authentication requests with a prompt set to "login consent" with "Unsupported 'prompt' value". Works with Google as it should be.