BetterShift

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as BetterShift and add the callback URL https://bettershift.example.com/api/auth/oauth2/callback/custom-oidc.
3. Click Create and copy the Client ID, the Client secret and the OIDC Discovery URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure BetterShift

Add or edit the following lines in your BetterShift .env file, using the values you copied from Pocket ID:

CUSTOM_OIDC_ENABLED=true
CUSTOM_OIDC_NAME=Login with Pocket ID # BUTTON_TEXT
CUSTOM_OIDC_CLIENT_ID=<client-id>
CUSTOM_OIDC_CLIENT_SECRET=<client-secret>
CUSTOM_OIDC_ISSUER=https://id.example.com/.well-known/openid-configuration
CUSTOM_OIDC_SCOPES=openid profile email  # Space-separated list

Save the file, redeploy BetterShift and sign in with Pocket ID to test it.

Sources

• https://bettershift.pantelx.com/
• https://github.com/panteLx/BetterShift