tududi

Requirements

• tududi v1.1.0 or later
• Pocket ID on HTTPS, reachable at https://id.example.com
• tududi server on HTTPS, reachable at https://tududi.example.com

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as tududi and add the callback URL https://tududi.example.com/api/oidc/callback/pocketid.
3. Click Create and copy the Client ID and the Client secret. The client secret is only shown once.
4. On the client’s General tab, set Client Launch URL to https://tududi.example.com, then click Save.
5. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure tududi

This is the minimal configuration needed to set up Pocket ID with tududi, taken from the tududi OIDC SSO docs.

1. Add the following lines to your environment variables file, replacing <client-id> and <client-secret> with the Client ID and the Client secret from Pocket ID:

   OIDC_ENABLED=true
   OIDC_PROVIDER_NAME=PocketID
   OIDC_PROVIDER_SLUG=pocketid
   OIDC_ISSUER_URL=https://id.example.com
   OIDC_CLIENT_ID=<client-id>
   OIDC_CLIENT_SECRET=<client-secret>
   OIDC_SCOPE=openid profile email
   OIDC_AUTO_PROVISION=true
   
   # when tududi is behind a reverse proxy:
   TUDUDI_TRUST_PROXY=true # required for proper session handling after OIDC login

2. Save and restart the tududi Docker Compose stack or app.