blumeops/docs
Erich Blume 6576880b0e heph Authentik: register heph-pwa redirect URIs (PKCE login) (#370)
Adds the heph-pwa redirect URIs to the Authentik `heph` OAuth2 provider so the new browser **Login with Authentik** flow (Authorization Code + PKCE, hephaestus PR #9) can redirect back and exchange the code:

- `https://heph.ops.eblu.me/` (the PWA origin)
- `http://localhost:8787/` (local dev: `hephd --web-root`)

Authentik also keys token-endpoint CORS off these origins, so they're required for the browser token exchange. Additive (the provider was `redirect_uris: []`); harmless until the PWA feature deploys.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #370
2026-06-05 07:30:31 -07:00
..
changelog.d heph Authentik: register heph-pwa redirect URIs (PKCE login) (#370) 2026-06-05 07:30:31 -07:00
explanation C0: black-hole /mirrors/* at Fly edge + name-and-shame scrapers 2026-06-01 20:52:20 -07:00
how-to C0: retire Todoist blumeops-tasks; point task discovery at heph 2026-06-03 21:32:10 -07:00
reference Add hephaestus sync hub to indri (launchagent, PWA, device-code OIDC) (#369) 2026-06-05 06:46:58 -07:00
tutorials C0: retire Todoist blumeops-tasks; point task discovery at heph 2026-06-03 21:32:10 -07:00
index.md C0: doc review — index.md, add ringtail to infra overview 2026-05-06 06:14:40 -07:00
quartz.config.ts Fix spider trap: disable SPA mode, remove index files, relax wiki-links (#290) 2026-03-09 11:59:43 -07:00
quartz.layout.ts Expose Forgejo publicly at forge.eblu.me (#278) 2026-03-03 08:40:41 -08:00