Forgejo

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Forgejo and add the callback URL https://forgejo.example.com/user/oauth2/PocketID/callback.
3. Click Create and copy the Client ID, the Client secret and the OIDC Discovery URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Forgejo

1. Log in to Forgejo as an admin.
2. Open Site Administration → Identity & Access → Authentication Sources.
3. Click Add Authentication Source.
4. Set Authentication Type to OAuth2.
5. Set Authentication Name to PocketID.

   Caution

   If you change this name, update the callback URL in Pocket ID to match.

6. Set OAuth2 Provider to OpenID Connect.
7. Enter the Client ID from Pocket ID into the Client ID (Key) field.
8. Enter the Client secret from Pocket ID into the Client Secret field.
9. Enter the OIDC Discovery URL from Pocket ID into the OpenID Connect Auto Discovery URL field.
10. Enable Skip local 2FA.
11. Set Additional Scopes to openid email profile.
12. Save the settings and sign in with Pocket ID to test it.