pgAdmin OAUTH

• https://raw.githubusercontent.com/pgadmin-org/pgadmin4/REL-9_11/web/pgadmin/authenticate/oauth2.py

PGADMIN_CONFIG_AUTHENTICATION_SOURCES="['oauth2', 'internal']"

PGADMIN_CONFIG_OAUTH2_AUTO_CREATE_USER=True

PGADMIN_CONFIG_OAUTH2_CONFIG="[{'OAUTH2_NAME':'authentik','OAUTH2_DISPLAY_NAME':'Login with authentik','OAUTH2_CLIENT_ID':'<Client ID from authentik>','OAUTH2_CLIENT_SECRET':'<Client secret from authentik>','OAUTH2_TOKEN_URL':'https://authentik.company/application/o/token/','OAUTH2_AUTHORIZATION_URL':'https://authentik.company/application/o/authorize/','OAUTH2_API_BASE_URL':'https://authentik.company/','OAUTH2_USERINFO_ENDPOINT':'https://authentik.company/application/o/userinfo/','OAUTH2_SERVER_METADATA_URL':'https://authentik.company/application/o/<application_slug>/.well-known/openid-configuration','OAUTH2_SCOPE':'openid email profile','OAUTH2_ICON':'<Fontawesome icon key (e.g., fa-key)>','OAUTH2_BUTTON_COLOR':'<Hexadecimal color code for the login button>'}]"

PGADMIN_CONFIG_OAUTH2_CLIENT_ID
PGADMIN_CONFIG_OAUTH2_CLIENT_SECRET
PGADMIN_CONFIG_OAUTH2_SCOPE
PGADMIN_CONFIG_OAUTH2_USERNAME_CLAIM

'OAUTH2_SSL_CERT_VERIFICATION': False

OAUTH2_ROLES_CLAIM
OAUTH2_ADMIN_ROLE        # Define which user will be admin

Related

/pgadmin4/pgadmin/authenticate/oauth2.py
OAUTH
Enabling OAUTH2 and OIDC Authentication
PGADMIN_DEFAULT_PASSWORD
OIDC

See also

• pgAdmin, dpage/pgadmin4, PGADMIN_CONFIG_AUTHENTICATION_SOURCES, helm install pgadmin, pgAdmin OAUTH
• helm install pgadmin