OAuth Failure - Logs and Config

[HavocWyrm]

Hi! I was asked to post some config files in this issue - #898

I setup everything based on this page in the Authentik documentation, all the values were taken straight from there (with the obvious substitutions like my domains, the secrets etc)

I also had a play around in an attempt to see if I could resolve the issue. Completely wiping the instance and setting it up again gets OIDC working, but only for a short while (a couple days max), then it reverts to the same error as before. But hopefully that rules out a config error, as it shouldn't work to begin with in that instance.

Docker Files

compose.yaml

services:
  web:    
    container_name: karakeep-web
    image: ghcr.io/karakeep-app/karakeep:${KARAKEEP_VERSION:-release}
    restart: unless-stopped
    volumes:
      - /srv/karakeep/data:/data
    ports:
      - 3100:3000
    env_file:
      - .env
    environment:
      MEILI_ADDR: http://meilisearch:7700
      BROWSER_WEB_URL: http://chrome:9222
      DATA_DIR: /data

  chrome:
    container_name: karakeep-chrome
    image: gcr.io/zenika-hub/alpine-chrome:123
    restart: unless-stopped
    command:
      - --no-sandbox
      - --disable-gpu
      - --disable-dev-shm-usage
      - --remote-debugging-address=0.0.0.0
      - --remote-debugging-port=9222
      - --hide-scrollbars

  meilisearch:
    container_name: karakeep-meilisearch
    image: getmeili/meilisearch:v1.13.3
    restart: unless-stopped
    env_file:
      - .env
    environment:
      MEILI_NO_ANALYTICS: "true"
    volumes:
      - /srv/karakeep/meilisearch:/meili_data

.env

KARAKEEP_VERSION=release
NEXTAUTH_SECRET={SECRET_KEY}
MEILI_MASTER_KEY={SECRET_KEY]
NEXTAUTH_URL={MY_DOMAIN_URL}
OLLAMA_BASE_URL={LOCAL_OLLAMA_IP}
INFERENCE_TEXT_MODEL=gemma3:1b
INFERENCE_IMAGE_MODEL=llava
OAUTH_CLIENT_ID={AUTHENTIK_CLIENT_ID}
OAUTH_CLIENT_SECRET={AUTHENTIK_CLIENT_SECRET}
OAUTH_WELLKNOWN_URL=https://{MY_AUTHENTIK_URL}/application/o/karakeep/.well-known/openid-configuration
OAUTH_PROVIDER_NAME=authentik
OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=true

[MohamedBassem]

What kind of errors are you seeing? Can you also share the logs from the container when those errors happen

[HavocWyrm]

I get the following error on the login screen when using the "Sign in with authentik" option. Container logs below

karakeep-web          | 2025-09-07T23:24:55.576321565Z [next-auth][error][SIGNIN_OAUTH_ERROR] 
karakeep-web          | 2025-09-07T23:24:55.576350569Z https://next-auth.js.org/errors#signin_oauth_error outgoing request timed out after 3500ms {
karakeep-web          | 2025-09-07T23:24:55.576355097Z   error: {
karakeep-web          | 2025-09-07T23:24:55.576358276Z     message: 'outgoing request timed out after 3500ms',
karakeep-web          | 2025-09-07T23:24:55.576361254Z     stack: 'n: outgoing request timed out after 3500ms\n' +
karakeep-web          | 2025-09-07T23:24:55.576364268Z       '    at /app/apps/web/.next/server/chunks/8169.js:36:37481\n' +
karakeep-web          | 2025-09-07T23:24:55.576367448Z       '    at async g.discover (/app/apps/web/.next/server/chunks/8169.js:36:42202)\n' +
karakeep-web          | 2025-09-07T23:24:55.576370573Z       '    at async s (/app/apps/web/.next/server/chunks/8169.js:3:37788)\n' +
karakeep-web          | 2025-09-07T23:24:55.576373658Z       '    at async o (/app/apps/web/.next/server/chunks/8169.js:3:30145)\n' +
karakeep-web          | 2025-09-07T23:24:55.576376706Z       '    at async Object.o (/app/apps/web/.next/server/chunks/8169.js:27:8657)\n' +
karakeep-web          | 2025-09-07T23:24:55.576379768Z       '    at async g (/app/apps/web/.next/server/chunks/8169.js:3:15688)\n' +
karakeep-web          | 2025-09-07T23:24:55.576382802Z       '    at async a (/app/apps/web/.next/server/chunks/8169.js:27:19776)\n' +
karakeep-web          | 2025-09-07T23:24:55.576386198Z       '    at async e.length.t (/app/apps/web/.next/server/chunks/8169.js:27:21265)\n' +
karakeep-web          | 2025-09-07T23:24:55.576389267Z       '    at async /app/node_modules/next/dist/compiled/next-server/app-route.runtime.prod.js:6:38411\n' +
karakeep-web          | 2025-09-07T23:24:55.576392431Z       '    at async e_.execute (/app/node_modules/next/dist/compiled/next-server/app-route.runtime.prod.js:6:27880)',
karakeep-web          | 2025-09-07T23:24:55.576395994Z     name: 'n'
karakeep-web          | 2025-09-07T23:24:55.576398942Z   },
karakeep-web          | 2025-09-07T23:24:55.576401833Z   providerId: 'custom',
karakeep-web          | 2025-09-07T23:24:55.576404836Z   message: 'outgoing request timed out after 3500ms'
karakeep-web          | 2025-09-07T23:24:55.576407767Z }

[gottoesplosivo]

I'm also getting this error, any suggestion on how to fix it?