# Dashboard Authelia Auth

**URL:** <https://discourse.nodered.org/t/dashboard-authelia-auth/89784>\
**Category:** Share Your Nodes\
**Tags:** dashboard-2\
**Created:** [26 July 2024 09:27 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784 "2024-07-26T09:27:09Z")\
**Posts on this page:** 16\
**Page:** 2

<div class="post-metadata">

**Author:** ![kitori](https://avatars.discourse-cdn.com/v4/letter/k/f08c70/32.png) [@kitori](https://discourse.nodered.org/u/kitori)\
**Post date:** [2 August 2024 06:55 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/21 "2024-08-02T06:55:18Z")

</div>

Edit /etc/hosts

```auto
  127.0.0.1 red.example.com
  127.0.0.1 auth.example.com

```

make ssl certs with `ssl-cert` (im on debian)

```auto
make-ssl-cert generate-default-snakeoil -y

```

* * *

set up nginx with the authelia templates

`node.red.conf`

```auto
server {
    listen 443 ssl http2;
    server_name red.example.com;

ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

    include /etc/nginx/snippets/authelia-location.conf;

    location / {

        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        include /etc/nginx/snippets/authelia-authrequest.conf;
        proxy_pass http://127.0.0.1:1880;
    }
}

```

`authelia.conf`

```server
    listen 80;
    server_name auth.*;

    return 301 https://$server_name$request_uri;
}

server {
listen 443 ssl;
server_name auth.example.com;

ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

 set $upstream http://127.0.0.1:9091;

    location / {
        include /etc/nginx/snippets/proxy.conf;
        proxy_pass $upstream;
    }

    location = /api/verify {
        proxy_pass $upstream;
    }

    location /api/authz/ {
        proxy_pass $upstream;
    }

}

---

```

`compose.yml`

```auto
  authelia:
    image: authelia/authelia
    container_name: authelia
    volumes:
      - ./authelia:/config
    ports:
      - 9091:9091
    restart: unless-stopped
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin

```

Fire up the Docker container the, then shut it down. Edit config file `configuration.yml` and `users.yml`

* * *

`configuration.yml`

```auto
server:
  address: 'tcp://:9091/'
logs_level: 'debug'
jwt_secret: insecure_secret
authentication_backend:
  file:
    path: /config/users.yml
totp:
  issuer: example.com
session:
  cookies:
    - domain: 'example.com'
      authelia_url: 'https://auth.example.com'
      default_redirection_url: 'https://www.red.example.com'
storage:
  encryption_key: 'you_must_generate_a_random_string_of_more_than_twenty_chars_and_configure_this'
  local:
    path: /config/db.sqlite
access_control:
  default_policy: bypass
  rules:
    - domain: "red.example.com"
      policy: one_factor
notifier:
  filesystem:
    filename: /config/emails.txt

```

`users.yml`

```auto
# yamllint disable rule:line-length
---
###############################################################
# Users Database #
###############################################################

# This file can be used if you do not have an LDAP set up.

users:
  dummy:
    disabled: false
    displayname: "Dummy Mc DumFace"
    password: "$argon2id$v=19$m=65536,t=3,p=4$Ah5oxLLndG463TwN849ozA$D56LkvAl0jPTTlHr4ThCv4RDFWnu0lSp3yJJoUZdxA4"  
    email: authelia@authelia.com
    groups:
      - admins
      - dev
...
# yamllint enable rule:line-length

```

---

<div class="post-metadata">

**Author:** ![joepavitt](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/joepavitt/32/59722_2.png) [@joepavitt](https://discourse.nodered.org/u/joepavitt)\
**Post date:** [2 August 2024 18:20 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/22 "2024-08-02T18:20:27Z")

</div>

😄 there will be many many more!

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [9 August 2024 00:47 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/23 "2024-08-09T00:47:28Z")

</div>

thanks @kitori  
After more than 7 days struggling with the Authelia configuration, I am stuck on an error that I cannot solve.

I think Authelia is ok, but I try to click on the dashboard 2.0 button and it shows me an error.

 ![Captura de Pantalla 2024-08-08 a la(s) 20.44.19](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/b/8/b88c1f39225df2615558f317a9dbd312a2019d3a.png)

```auto
9 Aug 00:43:51 - [warn] Encrypted credentials not found
9 Aug 00:43:51 - [info] Server now running at http://127.0.0.1:1880/
9 Aug 00:43:51 - [info] Starting flows
9 Aug 00:43:51 - [info] [ui-base:My Dashboard] Node-RED Dashboard 2.0 (v1.14.0) started at /dashboard
9 Aug 00:43:51 - [info] [ui-base:My Dashboard] Created socket.io server bound to Node-RED port at path /dashboard/socket.io
9 Aug 00:43:51 - [info] Started flows
node-red-dashboard-2-authelia-auth: msg._client is not found, not adding user info. This sometimes happens when the editor is refreshed with stale connections to the dashboard.
node-red-dashboard-2-authelia-auth: Session is not authenticated by Authelia; no user detected. See headers: {"host":"192.168.1.101:1880","connection":"keep-alive","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","referer":"http://192.168.1.101:1880/dashboard/page1?reloadTime=17231640308560.10454975441995651","accept-encoding":"gzip, deflate","accept-language":"es-419,es;q=0.9","cookie":"authentik_csrf=Xw7UZyLJ3UhcJiaa4RkvamXJkB8zyH5K"}
9 Aug 00:44:09 - [red] Uncaught Exception:
9 Aug 00:44:09 - [error] TypeError: Cannot read properties of undefined (reading 'split')
    at Object.onAddConnectionCredentials (/root/.node-red/node_modules/@aikitori/node-red-dashboard-2-authelia-auth/index.js:42:49)
    at /root/.node-red/node_modules/@flowfuse/node-red-dashboard/nodes/utils/index.js:43:36
    at Array.forEach (<anonymous>)
    at addConnectionCredentials (/root/.node-red/node_modules/@flowfuse/node-red-dashboard/nodes/utils/index.js:41:55)
    at onAction (/root/.node-red/node_modules/@flowfuse/node-red-dashboard/nodes/config/ui_base.js:508:19)
    at Socket.emit (node:events:517:28)
    at Socket.emitUntyped (/root/.node-red/node_modules/socket.io/dist/typed-events.js:69:22)
    at /root/.node-red/node_modules/socket.io/dist/socket.js:704:39
    at process.processTicksAndRejections (node:internal/process/task_queues:77:11)

```

Could someone shed some light on the way for me?

---

<div class="post-metadata">

**Author:** ![cgjgh](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/cgjgh/32/99867_2.png) [@cgjgh](https://discourse.nodered.org/u/cgjgh)\
**Post date:** [9 August 2024 03:43 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/24 "2024-08-09T03:43:29Z")

</div>

Based on the headers from debug, Authelia headers seem to be missing…

This however is confusing: [quote="Pepex7, post:23, topic:89784"]  
`"cookie":"authentik_csrf=Xw7UZyLJ3UhcJiaa4RkvamXJkB8zyH5K"}`  
[/quote]

Seems to be a cookie from Authentik, not Authelia🤔

---

<div class="post-metadata">

**Author:** ![kitori](https://avatars.discourse-cdn.com/v4/letter/k/f08c70/32.png) [@kitori](https://discourse.nodered.org/u/kitori)\
**Post date:** [9 August 2024 06:35 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/25 "2024-08-09T06:35:30Z")

</div>

Did you set the ticks to send client data?

 ![grafik](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/b/4/b4bd858e32365a460ce07f2eb54f7415ed11c20d.png)

What are the Authelia logs say? You can try to change the logging to debug too see if there is any error

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [9 August 2024 13:24 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/26 "2024-08-09T13:24:51Z")

</div>

I don't know why it is, I only ran Authelia in Docker.

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [9 August 2024 13:47 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/27 "2024-08-09T13:47:47Z")

</div>

> [@kitori](#):
>
> Did you set the ticks to send client data?

yes

 ![Captura de Pantalla 2024-08-09 a la(s) 07.35.05](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/4/c/4c5819b0b0bac17c78a25c09d25de33e9eeee7d6.png)

Log

```auto
time="2024-08-09T01:30:35+02:00" level=info msg="Authelia v4.38.10 is starting"
time="2024-08-09T01:30:35+02:00" level=info msg="Log severity set to debug"
time="2024-08-09T01:30:35+02:00" level=info msg="Storage schema is being checked for updates"
time="2024-08-09T01:30:35+02:00" level=info msg="Storage schema is already up to date"
time="2024-08-09T01:30:36+02:00" level=debug msg="Create Server Service (metrics) skipped"
time="2024-08-09T01:30:36+02:00" level=info msg="Startup complete"
time="2024-08-09T01:30:36+02:00" level=info msg="Listening for non-TLS connections on '[::]:9091' path '/'" server=main service=server
time="2024-08-09T02:15:26+02:00" level=error msg="Error occurred retrieving user session" error="unable to retrieve session cookie domain provider: no configured session cookie domain matches the url 'http://192.168.1.101:9091/api/state'" method=GET path=/api/state remote_ip=192.168.1.85 stack="github.com/authelia/authelia/v4/internal/handlers/handler_state.go:16 StateGET\ngithub.com/authelia/authelia/v4/internal/middlewares/bridge.go:54 handleRouter.(*BridgeBuilder).Build.func5.1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:65 SecurityHeadersCSPNone.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:91 SecurityHeadersNoStore.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:30 SecurityHeadersBase.func1\ngithub.com/fasthttp/router@v1.5.2/router.go:441 (*Router).Handler\ngithub.com/authelia/authelia/v4/internal/middlewares/log_request.go:14 handleRouter.LogRequest.func40\ngithub.com/authelia/authelia/v4/internal/middlewares/errors.go:38 RecoverPanic.func1\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2379 (*Server).serveConn\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:224 (*workerPool).workerFunc\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:196 (*workerPool).getCh.func1\nruntime/asm_amd64.s:1695 goexit"
time="2024-08-09T02:19:44+02:00" level=error msg="Error occurred retrieving user session" error="unable to retrieve session cookie domain provider: no configured session cookie domain matches the url 'https://192.168.1.101/api/state'" method=GET path=/api/state remote_ip=192.168.1.85 stack="github.com/authelia/authelia/v4/internal/handlers/handler_state.go:16 StateGET\ngithub.com/authelia/authelia/v4/internal/middlewares/bridge.go:54 handleRouter.(*BridgeBuilder).Build.func5.1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:65 SecurityHeadersCSPNone.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:91 SecurityHeadersNoStore.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:30 SecurityHeadersBase.func1\ngithub.com/fasthttp/router@v1.5.2/router.go:441 (*Router).Handler\ngithub.com/authelia/authelia/v4/internal/middlewares/log_request.go:14 handleRouter.LogRequest.func40\ngithub.com/authelia/authelia/v4/internal/middlewares/errors.go:38 RecoverPanic.func1\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2379 (*Server).serveConn\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:224 (*workerPool).workerFunc\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:196 (*workerPool).getCh.func1\nruntime/asm_amd64.s:1695 goexit"
time="2024-08-09T02:22:09+02:00" level=error msg="Error occurred retrieving user session" error="unable to retrieve session cookie domain provider: no configured session cookie domain matches the url 'http://192.168.1.101:9091/api/state'" method=GET path=/api/state remote_ip=192.168.1.85 stack="github.com/authelia/authelia/v4/internal/handlers/handler_state.go:16 StateGET\ngithub.com/authelia/authelia/v4/internal/middlewares/bridge.go:54 handleRouter.(*BridgeBuilder).Build.func5.1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:65 SecurityHeadersCSPNone.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:91 SecurityHeadersNoStore.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:30 SecurityHeadersBase.func1\ngithub.com/fasthttp/router@v1.5.2/router.go:441 (*Router).Handler\ngithub.com/authelia/authelia/v4/internal/middlewares/log_request.go:14 handleRouter.LogRequest.func40\ngithub.com/authelia/authelia/v4/internal/middlewares/errors.go:38 RecoverPanic.func1\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2379 (*Server).serveConn\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:224 (*workerPool).workerFunc\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:196 (*workerPool).getCh.func1\nruntime/asm_amd64.s:1695 goexit"
time="2024-08-09T02:22:11+02:00" level=error msg="Error occurred retrieving user session" error="unable to retrieve session cookie domain provider: no configured session cookie domain matches the url 'http://192.168.1.101:9091/api/state'" method=GET path=/api/state remote_ip=192.168.1.85 stack="github.com/authelia/authelia/v4/internal/handlers/handler_state.go:16 StateGET\ngithub.com/authelia/authelia/v4/internal/middlewares/bridge.go:54 handleRouter.(*BridgeBuilder).Build.func5.1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:65 SecurityHeadersCSPNone.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:91 SecurityHeadersNoStore.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:30 SecurityHeadersBase.func1\ngithub.com/fasthttp/router@v1.5.2/router.go:441 (*Router).Handler\ngithub.com/authelia/authelia/v4/internal/middlewares/log_request.go:14 handleRouter.LogRequest.func40\ngithub.com/authelia/authelia/v4/internal/middlewares/errors.go:38 RecoverPanic.func1\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2379 (*Server).serveConn\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:224 (*workerPool).workerFunc\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:196 (*workerPool).getCh.func1\nruntime/asm_amd64.s:1695 goexit"
time="2024-08-09T02:35:44+02:00" level=error msg="Error occurred retrieving user session" error="unable to retrieve session cookie domain provider: no configured session cookie domain matches the url 'http://192.168.1.101:9091/api/state'" method=GET path=/api/state remote_ip=192.168.1.85 stack="github.com/authelia/authelia/v4/internal/handlers/handler_state.go:16 StateGET\ngithub.com/authelia/authelia/v4/internal/middlewares/bridge.go:54 handleRouter.(*BridgeBuilder).Build.func5.1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:65 SecurityHeadersCSPNone.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:91 SecurityHeadersNoStore.func1\ngithub.com/authelia/authelia/v4/internal/middlewares/headers.go:30 SecurityHeadersBase.func1\ngithub.com/fasthttp/router@v1.5.2/router.go:441 (*Router).Handler\ngithub.com/authelia/authelia/v4/internal/middlewares/log_request.go:14 handleRouter.LogRequest.func40\ngithub.com/authelia/authelia/v4/internal/middlewares/errors.go:38 RecoverPanic.func1\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2379 (*Server).serveConn\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:224 (*workerPool).workerFunc\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:196 (*workerPool).getCh.func1\nruntime/asm_amd64.s:1695 goexit"
time="2024-08-09T02:35:50+02:00" level=error msg="Request timeout occurred while handling request from client." error="read tcp 172.22.0.2:9091->192.168.1.85:50725: i/o timeout" method=GET path=/ remote_ip=192.168.1.85 stack="github.com/authelia/authelia/v4/internal/server/handlers.go:86 CreateDefaultServer.handleError.func2\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2870 (*Server).writeErrorResponse\ngithub.com/valyala/fasthttp@v1.55.0/server.go:2308 (*Server).serveConn\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:224 (*workerPool).workerFunc\ngithub.com/valyala/fasthttp@v1.55.0/workerpool.go:196 (*workerPool).getCh.func1\nruntime/asm_amd64.s:1695 goexit" status_code=408
time="2024-08-09T02:50:06+02:00" level=debug msg="Shutdown initiated due to process signal" signal=terminated
time="2024-08-09T02:50:06+02:00" level=info msg="Shutdown initiated"
time="2024-08-09T02:50:06+02:00" level=info msg="Shutdown complete"

```

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [9 August 2024 14:00 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/28 "2024-08-09T14:00:19Z")

</div>

/etc/nginx/sites-available/auth.conf

```auto
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name auth.*;

#ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
#ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

ssl_certificate /etc/ssl/certs/localserver.crt;
ssl_certificate_key /etc/ssl/private/localserver.key;

 set $upstream http://127.0.0.1:9091;

    location / {
        include /etc/nginx/snippets/proxy.conf;
        proxy_pass $upstream;
    }

    location = /api/verify {
        proxy_pass $upstream;
    }

    location /api/authz/ {
        proxy_pass $upstream;
    }
}

```

/etc/nginx/sites-available/red.conf

```auto
server {
    listen 443 ssl http2;
    server_name red.local.server;

# ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
# ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
ssl_certificate /etc/ssl/certs/localserver.crt;
ssl_certificate_key /etc/ssl/private/localserver.key;

    include /etc/nginx/snippets/authelia-location.conf;

    location / {
        include /etc/nginx/snippets/proxy.conf;
        include /etc/nginx/snippets/authelia-authrequest.conf;
        proxy_pass http://127.0.0.1:1880;
    }
}

```

nano /etc/hosts

```auto
127.0.0.1 localhost
127.0.0.1 red.local.server
127.0.0.1 auth.local.server

```

I don't know what else to do... what could it be that I'm missing? 🤔

---

<div class="post-metadata">

**Author:** ![kitori](https://avatars.discourse-cdn.com/v4/letter/k/f08c70/32.png) [@kitori](https://discourse.nodered.org/u/kitori)\
**Post date:** [13 August 2024 07:06 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/29 "2024-08-13T07:06:25Z")

</div>

Hmm...  
i looks like you access authelia via ip, and not by domain name.  
Check the authelia configuration.  
What happen when you ping (auth|red).example.com?

```auto
access_control:
  default_policy: deny
  rules:
    - domain:
        - "auth.example.net"
      policy: bypass

```

```auto
session:
  cookies:
    - domain: 'example.com'
      authelia_url: 'https://auth.example.com'
      default_redirection_url: 'https://www.red.example.com'

```

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [13 August 2024 22:40 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/30 "2024-08-13T22:40:14Z")

</div>

Apparently it is a problem in the new Authelia update. I was talking to Authelia support and they were doing some testing.

These days they published something about node-red, but they are still looking into it.

> **[Node-RED](https://www.authelia.com/integration/openid-connect/node-red/)**
>
> Integrating Node-RED with the Authelia OpenID Connect 1.0 Provider.

---

<div class="post-metadata">

**Author:** ![kitori](https://avatars.discourse-cdn.com/v4/letter/k/f08c70/32.png) [@kitori](https://discourse.nodered.org/u/kitori)\
**Post date:** [14 August 2024 07:31 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/31 "2024-08-14T07:31:56Z")

</div>

Cool 🙂 This is for the Admin Auth, so not the Dashboard. I Use it like so:

Set the Admin on a seperat path /admin:

```auto
httpAdminRoot: '/admin',

```

So i have these two path:

`http://board.example.com/admin`  
`http://board.example.com/dashboard`

and these ACL roules:

```auto
access_control:
  default_policy: deny
  rules:
    - domain:
        - "auth.example.com"
      policy: bypass
    - domain:
        - "board.example.com"
      policy: one_factor
      subject:
        - ['group:admins']
      resources:
       - '^/admin/.*$'
       - '^/admin$'
       - '^/admin/'
    - domain:
        - "board.example.com"
      policy: one_factor
      subject:
        - ['group:admins']
        - ['group:test']
      resources:
       - '^/dashboard/.*$'
       - '^/dashboard$'
       - '^/dashboard/'

```

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [23 August 2024 22:51 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/32 "2024-08-23T22:51:51Z")

</div>

I had a hard time (4 weeks 😔 ) configuring Authelia to use with node-red, although I have not yet been able to transfer user data to Dashboard 2.

I am not an expert but I am leaving it here because it may be useful to someone.

I'm on Debian

First update.

```auto
apt-get update && apt-get upgrade

```

- edit file /etc/hosts

```auto
nano /etc/hosts
127.0.0.1 red.local.server
127.0.0.1 auth.local.server

```

- Create the certificates  
I initially created them with openssl, but it didn't work for me (it gave me problems later).

I did it like this:

> **[Install step](https://smallstep.com/docs/step-cli/installation/#debianubuntu)**
>
> Learn how to install the step command

```auto
wget https://dl.smallstep.com/cli/docs-cli-install/latest/step-cli_amd64.deb
sudo dpkg -i step-cli_amd64.deb

step-cli certificate create "Smallstep Root CA" ca-cert.pem ca-key.pem \
  --no-password --insecure \
  --profile root-ca \
  --not-before "2024-01-01T00:00:00+00:00" \
  --not-after "2034-01-01T00:00:00+00:00" \
  --kty EC --crv P-256

step-cli certificate create "Smallstep Leaf" cert.pem key.pem \
  --no-password --insecure \
  --profile leaf \
  --ca ca-cert.pem \
  --ca-key ca-key.pem \
  --not-before "2024-01-01T00:00:00+00:00" \
  --not-after "2034-01-01T00:00:00+00:00" \
  --san "local.server" \
  --san "*.local.server" \
  --kty EC --crv P-256

```

This will create the certificates in the current directory.

```auto
ca-cert.pem ca-key.pem cert.pem key.pem step-cli_amd64.deb

```

Then, when nginx is installed, they must be copied to the corresponding directory.

- Install nginx

```auto
apt-get install nginx

```

copy the certificate and key files created earlier.

```auto
cp cert.pem /etc/ssl/certs/
cp key.pem /etc/ssl/private/

```

create the configuration files for node-red and authelia

```auto
nano /etc/nginx/sites-available/red.conf

```

```auto
server {
    listen 443 ssl http2;
    server_name red.server.local;

ssl_certificate /etc/ssl/certs/cert.pem;
ssl_certificate_key /etc/ssl/private/key.pem;

    location / {
        #include /etc/nginx/snippets/proxy.conf;
        #include /etc/nginx/snippets/authelia-authrequest.conf;
        proxy_pass http://127.0.0.1:1880;
    }
}

```

nano /etc/nginx/sites-available/auth.conf

```auto
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name auth.*;

ssl_certificate /etc/ssl/certs/cert.pem;
ssl_certificate_key /etc/ssl/private/key.pem;

 set $upstream http://127.0.0.1:9091;
 #set $upstream http://192.168.1.101:9091;
    location / {
        include /etc/nginx/snippets/proxy.conf;
        proxy_pass $upstream;
    }

    location = /api/verify {
        proxy_pass $upstream;
    }

    location /api/authz/ {
        proxy_pass $upstream;
    }
}

```

Check syntax in nginx

```auto
nginx -t

```

- Install Docker  
[Install Docker Engine on Debian | Docker Docs](https://docs.docker.com/engine/install/debian/)

```auto
apt install ca-certificates curl gnupg
apt install docker
apt install docker-compose

```

- Install Authelia (with docker)

```auto
nano docker-compose.yml

```

```auto
copy this

```

```auto
services:
  authelia:
    image: authelia/authelia
    container_name: authelia
    volumes:
      - ./authelia:/config
    ports:
      - 9091:9091
    restart: unless-stopped
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin

```

run docker-compose

```auto
docker-compose up -d

```

- Config Authelia  
create a backup of authelia/configuration.yml and in a new file copy this, replace as appropriate:

```auto
nano authelia/configuration.yml

```

```auto
server:
  address: 'tcp://:9091/'
logs_level: 'debug'
jwt_secret: insecure_secret
authentication_backend:
  file:
    path: /config/users.yml
totp:
  issuer: local.server
session:
  cookies:
    - domain: 'local.server'
      authelia_url: 'https://auth.local.server'
      default_redirection_url: 'https://red.local.server:1880'
storage:
  encryption_key: 'p1FV3ic10gP578miGW2WAbvNvUlx776tJPr1lCbfhWupHgVaEstxkNdVu9ZsUMRa'
  local:
    path: /config/db.sqlite
access_control:
  default_policy: bypass
  rules:
    - domain: "local.server"
      policy: one_factor
notifier:
  filesystem:
    filename: /config/emails.txt

identity_providers:
  oidc:
    ## The other portions of the mandatory OpenID Connect 1.0 configuration go here.
    ## See: https://www.authelia.com/c/oidc

    jwks:
      - key_id: 'example'
        algorithm: 'RS256'
        use: 'sig'
        key: |
          -----BEGIN PRIVATE KEY-----
          MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCGMIKnLKo+wn6P
          dMrMHOfeCtImn7X25dwP+XSVY6rN0fgAJWVyO7lJg2B1X4JHS+Ea1ihQupHR6ko/
          0mcv62cMMql/b3BD8LExD8dfK/STGhUFc2DvVwoepiohGRoQqesl8Xwon4be4jc3
          /h7baxF3DxRT43DJHAswa0tEQYKbBoigzTj2pkwvfjMH50eapgRBACUFloi+OSRB
          zDsLj/g7FN/6jsZI0oKkvtsXj9SeEUFj5aSGBHv+oz9DCPbni7hbSdNf4h6cTJf/
          bs4i/oP70rojzUghmXg2lx+QotoGiy+GMOG8a+SLa4niy1qXg83iLNaRPR9C1bJF
          Gub4YVyjgxujPB9i7zVqxzimDqTGLqCJ+O+1zP9EupuXa6HWRwxS7BhDrjT97AQ/
          hyXGfYqvw4pGw1ncfh73kf4+okJ01txCtdAk0O7SgjmNbs7BEXHgAABT1RvGlBiL
          KihsSEOMZ/o/MCck/qzfwraAQ4L6o56dioBTGd/8lLEzi7z4XXbl925D7ThCR/ba
          h6hj8Fi4+sisJ5vKrt9p0gxZXBtUCt7LnzpFC7iPjqkVjS/T0aide1CvkJR+t9Jd
          nRXtBEWiQIhj3NoqtlLHd2StNFdXRtePJCiH1h/yDdk7kkakCBi3z5mTQUCF3tss
          gSiasD171GwZFqeyRysRmN29XmWRLQIDAQABAoICACd1zHXspIOgHieBaMFtHqIk
          /HdvL8tS/MuVx7rGfEvaGtuwI4zcEziS8aKSW3Ur0x5ZK7HRq1/XTc5GySFGUB8+
          Jqna02CnPvP2d+J8wocffF8F9tNq/QbWRj1FbGzKCuQ1hxVLFBYm36YPjHNpoNEq
          Fgg1Mc1x+bhbVN7VhNqhqTvgHYgqjuzIZ6lDUcMgXs/egwSJp9yIYSkYLaTQyWZW
          VScRJS30+YYIudTL7vIskNYXibH/T5cp2kiUMkcUxznRE992VxoPTANJSkTwI0/C
          QAqXK0b2ImurNRULTqHt/COx7C/Eaoi1Lu8KbbFwiPKhzNcY6kB1Jt87cgBIYT0n
          JQiTmj7rWojfwMKd62VNIVoQHHKgyjuWC9Tr6iEPTPWbdpI0NJ7Peno+MpwgxEY4
          g5odiEywDfIfe+yxotldL40jGfKXbJnLjC86oYMA/avoR995TDOEjmp4z7ZU7jVk
          wEt+ZOyeNscYIcPfXMwNo586v5+O8wo4BK3uPL3fGUU6GsJfal8xtyFOawUr+/vF
          Mh+fBlbw24fpLiGincxQeUG8e5ZP3veic1XAu9WFMxOI8rT7E4timKcQSTCnRqFC
          qnpIp5b5gxmFr09ciShSOfEG27YxIvTqakQAuxC6KkoliOkZdi1d1SvhYiMq3r86
          l+UsAjPerW/7C5oeR4LhAoIBAQC7gpRNYSJ1CDQaUVbcuGu9c46EWz2CJGvDdEtP
          DMU++aL6QA7r4hfZGT+PpqHbkJiik9SvgU2i8NCyfyK3K99z6zCIQFU6Fq84MGC5
          b8fsID1GeUKLgAxJ1keJ0jsPkswjUf0sTbcyKHuVCeTEcaPBGfIkeJZxgydr/Bwp
          HUcw7lCdQyp3PNnh56AJpNzOLQBQsGN5IXREkM06sNAPh6MixbsAzrtUnBZDllMW
          8ptNBtSshRxdWqtGvnk7yzI4ed+85wRTX/3rx9qCX3cH88+14WYXgYv5+oR9sLv5
          3naxZm+lL+SlMO8pZfvn1bvxdKgbxNvelO/942MvJV+dwl7HAoIBAQC3NBt2uprx
          fxcVV+wQeaWsR1jzskt74t2jNZqlrkrSikewpYwTGm4mIqlZaVPFW97Za4SozUOd
          Fa5mKgn9zCfuCNgezXohpCgRvZTCwD1xZd4n49fH6Y7sL5LpofkM2P7tVeWUQyAu
          c4fK8JDaxKy3lxhziqDwzZFRvdUkNXnB2gibvGoyHrUR6tg6DQtYI8EmdOLBUH6z
          mWoNIPH2nQ6NRVlxSqn5kKGoBLrBqyAQDEFeYwjeT4ZsB4r+/ZEGyMb10ajSCJRI
          H8RaLTUqeBTAbvGsT3VCks3FTZtl1e7Ik2gnm/cNkJ0jTiqqxyxcWs/Fhfr2TTVB
          t7StJyKkdGxrAoIBAQCLrXqxpYDYcxL049BzvMEtMA5i0+CeuGi6AUA0E4w/HBBm
          oB89YX9oTiGF7Ze2iiDZQov1bLmbfg3IWWJP1lOu8uyFIn8aNVmy3n6+w+DGKUHb
          5GpIpksBGajSppMuR6jfSqzwOrgTmgps/CC4oPpd1ukEd/uBdTSBgRytF803St8s
          NqNEjUS0vij95hxBTU5lzO9chSoqBT+Lz7g9SUmhlm9164mqPldrY2hjuLctCsCT
          /tghRnA905dVjkjLvyWGfwQ+40uwPoCsC1cMynbYwp2dNvhBb3cQdf2g5TG/dlIG
          WAXXc/tD+F9M1G8bL04m2V77kDCyDJeOwCVYzDhzAoIBABWRyPn9lmiAchNNOrnl
          2J+j9tEaWNDJMRcaJI8FKkIHjdE6bHeDURykUBP61qYR3vbyNbg6Eo/YEaRtpqd+
          9eSMngViY9K6JQ2RqIYVZCaJu9IufSVIVk9wenePXmco1TrUNidyj8NoTsCR+jwH
          k945p+NSmwg+67EYDJQqx58PMJxFXqtv+hmV8MdE6eUCsKb6dAgWlhRHJ7lL+7Dx
          ZNk1JQa1p7V+VcoWZHaQ00GQb9HRDyY9brIhYTgMWprV4LbobFvuLqcfNlr3n57U
          bH0LkuCaqk+gQSHNtVIUEf0DfevL7RZnxFh3x4Y71Pk6p+O1loqRJIgMPPV1+hoq
          qukCggEAeKevvz2R6+zbsihf+cUM8mjTNPnuWD+1BV7XK/pn1p2o3CWVycGPAgTz
          rcIQZBu7Qt9Rzs2jHk+StYUU6AB4vkSqMN+Np9HQzjPoLmgiPGjqJESb/lvEDf8G
          Hewb2RAv3hjSG0cSnpP0xahPRuKpHIn0Jh156iDgEsRUwMooDzuxp1S6e4T6kfqj
          q8zZe96sXrueTsBw2FO4DNnaCS7iQTC6nnjqCmh4IDrXHoEgLolVa3sK5bIbRb8m
          7kFjn8oicHcPObwsS615tTqaF1mGnZBxqDFucpcHNzfkthn9kRpK4lRCO827zmqq
          F+yGFKHafzBYyQjrQPFjTu0FbiYywQ==
          -----END PRIVATE KEY-----

    clients:
      - client_id: 'node-red'
        client_name: 'Node-RED'
        client_secret: '$pbkdf2-sha512$310000$c8p78n7pUMln0jzvd4aK4Q$JNRBzwAo0ek5qKn50cFzzvE9RXV88h1wJn5KGiHrD0YKtZaR/nCb2CJPOsKaPK0hjf.9yHxzQGZziziccp6Yng' # The digest of 'insecure_secret'.
        authorization_policy: 'one_factor'
        #require_pkce: true
        #pkce_challenge_method: 'S256'
        redirect_uris:
          - 'https://red.local.server:1880/auth/strategy/callback/'
        scopes:
          - 'openid'
          - 'email'
          - 'profile'
          - 'groups'
        userinfo_signed_response_alg: 'none'
        token_endpoint_auth_method: 'client_secret_post'

```

- configure users

```auto
nano authelia/users.yml

```

```auto
# yamllint disable rule:line-length
---
###############################################################
# Users Database #
###############################################################

# This file can be used if you do not have an LDAP set up.

users:
  admin:
    disabled: false
    displayname: "Administrador"
    password: "$argon2id$v=19$m=65536,t=3,p=4$6xP4KjN/4bocHuf2k3p8Ug$EXMEJt4W/qKjS9O4rGYFt4eU5mKrMzkcMeOdGE0IlUQ" # is admin in this case.
    email: authelia@authelia.com
    groups:
      - admins
      - dev
...
# yamllint enable rule:line-length

```

- generate hash password  
docker run -it authelia/authelia:latest authelia crypto hash generate argon2

Down docker compose and up

```auto
docker-compose down
docker-compose up -d

```

At this point it is important to see the Authelia logs to know if it is running correctly and the configuration is correct (I didn't know this haha)

```auto
docker logs authelia -f

```

if all goes well, it will look something like this.

```auto
time="2024-08-24T00:25:52+02:00" level=info msg="Authelia v4.38.10 is starting"
time="2024-08-24T00:25:52+02:00" level=info msg="Log severity set to debug"
time="2024-08-24T00:25:52+02:00" level=debug msg="Registering client node-red with policy one_factor (one_factor)"
time="2024-08-24T00:25:52+02:00" level=info msg="Storage schema is being checked for updates"
time="2024-08-24T00:25:52+02:00" level=info msg="Storage schema is already up to date"
time="2024-08-24T00:25:52+02:00" level=debug msg="Create Server Service (metrics) skipped"
time="2024-08-24T00:25:52+02:00" level=info msg="Startup complete"
time="2024-08-24T00:25:52+02:00" level=info msg="Listening for non-TLS connections on '[::]:9091' path '/'" server=main service=server

```

- Install Node-RED

```auto
apt install nodejs
apt install npm

```

check versions

```auto
nodejs -v
v18.19.0
npm -v   
9.2.0

```

```auto
npm install -g --unsafe-perm node-red

```

then enter the address created in hosts

[https://red.local.server:1880/](https://red.local.server:1880/)

 ![Captura de Pantalla 2024-08-23 a la(s) 18.40.04](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/2/b/2b80655ec2eeadb47083603788e9b1da6ff9a735.png)

The logs de authelia (docker logs authelia -f) will look something like this

```auto
time="2024-08-24T00:25:52+02:00" level=info msg="Authelia v4.38.10 is starting"
time="2024-08-24T00:25:52+02:00" level=info msg="Log severity set to debug"
time="2024-08-24T00:25:52+02:00" level=debug msg="Registering client node-red with policy one_factor (one_factor)"
time="2024-08-24T00:25:52+02:00" level=info msg="Storage schema is being checked for updates"
time="2024-08-24T00:25:52+02:00" level=info msg="Storage schema is already up to date"
time="2024-08-24T00:25:52+02:00" level=debug msg="Create Server Service (metrics) skipped"
time="2024-08-24T00:25:52+02:00" level=info msg="Startup complete"
time="2024-08-24T00:25:52+02:00" level=info msg="Listening for non-TLS connections on '[::]:9091' path '/'" server=main service=server
time="2024-08-24T00:40:52+02:00" level=debug msg="Authorization Request with id 'f3a3327c-d5ea-48c2-bd11-efab0c96a4dc' on client with id 'node-red' is being processed" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:13+02:00" level=debug msg="Mark 1FA authentication attempt made by user 'admin'" method=POST path=/api/firstfactor remote_ip=192.168.1.84
time="2024-08-24T00:41:13+02:00" level=debug msg="Successful 1FA authentication attempt made by user 'admin'" method=POST path=/api/firstfactor remote_ip=192.168.1.84
time="2024-08-24T00:41:14+02:00" level=debug msg="Authorization Request with id '253ec8c9-baf3-4352-bb70-d6dbf9d752b6' on client with id 'node-red' is being processed" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:14+02:00" level=debug msg="Authorization Request with id '253ec8c9-baf3-4352-bb70-d6dbf9d752b6' on client with id 'node-red' using consent mode 'explicit' proceeding to generate a new consent session" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:14+02:00" level=debug msg="Authorization Request with id '253ec8c9-baf3-4352-bb70-d6dbf9d752b6' on client with id 'node-red' using consent mode 'explicit' authentication level 'one_factor' is sufficient for client level 'one_factor'" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:14+02:00" level=debug msg="Authorization Request with id '253ec8c9-baf3-4352-bb70-d6dbf9d752b6' on client with id 'node-red' using consent mode 'explicit' is being redirected to 'https://auth.local.server/consent?id=e9231d68-2f03-4730-b7d4-512971f6acc6'" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:17+02:00" level=debug msg="Authorization Request with id 'ae1efea8-4019-4932-8618-a96beffbb03b' on client with id 'node-red' is being processed" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:17+02:00" level=debug msg="Authorization Request with id 'ae1efea8-4019-4932-8618-a96beffbb03b' on client with id 'node-red' was successfully processed, proceeding to build Authorization Response" method=GET path=/api/oidc/authorization remote_ip=192.168.1.84
time="2024-08-24T00:41:18+02:00" level=debug msg="Access Request with id 'ae1efea8-4019-4932-8618-a96beffbb03b' on client with id 'node-red' is being processed" method=POST path=/api/oidc/token remote_ip=127.0.0.1
time="2024-08-24T00:41:18+02:00" level=debug msg="Access Request with id 'ae1efea8-4019-4932-8618-a96beffbb03b' on client with id 'node-red' has successfully been processed" method=POST path=/api/oidc/token remote_ip=127.0.0.1

```

This is as far as I go, I'm sure there are things that can be done much better.  
thanks to @kitori @joepavitt for all help.

I still can't get the user data to dashboard 2 with the plugins.  
@aikitori/node-red-dashboard-2-authelia-auth/node-red-dashboard-2-authelia-auth

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [28 August 2024 03:07 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/33 "2024-08-28T03:07:02Z")

</div>

I can't get user data to reach node-red (dashboard 2).  
I have added the proxy\_set\_header to my /etc/nginx/sites-available/red.conf file

```auto
server {
    listen 443 ssl http2;
    server_name red.server.local;

#ssl_certificate /etc/ssl/certs/localserver.crt;
#ssl_certificate_key /etc/ssl/private/localserver.key;

ssl_certificate /etc/ssl/certs/cert.pem;
ssl_certificate_key /etc/ssl/private/key.pem;

    include /etc/nginx/snippets/authelia-location.conf;

    location / {
        #include /etc/nginx/snippets/proxy.conf;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        include /etc/nginx/snippets/authelia-authrequest.conf;
        proxy_pass http://127.0.0.1:1880;
    }
}

```

node-red says:  
node-red-dashboard-2-authelia-auth: Session is not authenticated by Authelia; no user detected.

```auto
node-red-dashboard-2-authelia-auth: Session is not authenticated by Authelia; no user detected. See headers: {"host":"red.local.server:1880","connection":"keep-alive","sec-ch-ua":"\"Not)A;Brand\";v=\"99\", \"Google Chrome\";v=\"127\", \"Chromium\";v=\"127\"","accept":"*/*","sec-ch-ua-mobile":"?0","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","sec-ch-ua-platform":"\"macOS\"","sec-fetch-site":"same-origin","sec-fetch-mode":"cors","sec-fetch-dest":"empty","referer":"https://red.local.server:1880/dashboard/page1","accept-encoding":"gzip, deflate, br, zstd","accept-language":"es-419,es;q=0.9"}

```

debug

```auto
msg : Object
object
_event: object
_client: object
user: object
host: "red.local.server:1880"
agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
userId: null
name: null
email: null
groups: null
provider: "Authelia"
socketId: "iy1kNPeA0sN07CnwAAAD"
socketIp: "192.168.1.86"
topic: ""
payload: "Hola"
_msgid: "909eb5e327bfbf89"

```

---

<div class="post-metadata">

**Author:** ![kitori](https://avatars.discourse-cdn.com/v4/letter/k/f08c70/32.png) [@kitori](https://discourse.nodered.org/u/kitori)\
**Post date:** [28 August 2024 07:15 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/34 "2024-08-28T07:15:28Z")

</div>

Use the location really using Authelia? if you are logged out, do you get redirect to the authelia log-in site?

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [28 August 2024 13:12 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/35 "2024-08-28T13:12:06Z")

</div>

yes, go back there.

 ![Captura de Pantalla 2024-08-23 a la(s) 18.40.04](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/2/b/2b80655ec2eeadb47083603788e9b1da6ff9a735.png)

---

<div class="post-metadata">

**Author:** ![Pepex7](https://avatars.discourse-cdn.com/v4/letter/p/a88e57/32.png) [@Pepex7](https://discourse.nodered.org/u/Pepex7)\
**Post date:** [29 August 2024 21:58 UTC](https://discourse.nodered.org/t/dashboard-authelia-auth/89784/36 "2024-08-29T21:58:37Z")

</div>

someone light my way?

[Previous page](https://discourse.nodered.org/t/dashboard-authelia-auth/89784.md?page=1)