ByteStash

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as ByteStash and add the callback URL https://bytestash.example.com/api/oauth/openid.
3. Click Create and copy the Client ID and the Client secret. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure ByteStash

1. Set the following ByteStash environment variables:
   • OIDC_ENABLED: true to enable OIDC authentication.
   • OIDC_DISPLAY_NAME: the lowercase name of the provider (pocketid).
   • OIDC_ISSUER_URL: the URL of your Pocket ID instance, such as https://id.example.com.
   • OIDC_CLIENT_ID: the Client ID from Pocket ID.
   • OIDC_CLIENT_SECRET: the Client secret from Pocket ID.
2. Set up your email address in ByteStash. It has to match your email address in Pocket ID.