Skip to main content
Point PostQueen at your own identity provider, so people sign in with the account they already have rather than a new password here. This is worth doing if your organisation already runs single sign-on, and is not needed otherwise.
This is about signing into PostQueen. Connecting social networks so she can post to them is a different thing entirely: see Providers.

​
Before you start

Two things to know before you start.Your OIDC provider replaces the Google button, and the Farcaster and wallet buttons with it. It does not replace GitHub, because GitHub sign-in and OIDC can never appear together in the first place: GitHub renders only when IS_GENERAL is unset, and OIDC renders only when it is set.Which means IS_GENERAL has to be set for any of this to appear. Configure every variable below without it and the login page will look exactly as it did before, GitHub button and all. Nothing on this page will have taken effect.

​
Setup

We will use Authentik as an OIDC provider example, with base URL https://authentik.example.com
1

Create an Application/Provider on the Authentik side

You will find the following important information:
  • redirect_uri => https://postqueen.example.com/settings
  • client_id => randomclientid
  • client_secret => randomclientsecret
  • auth_url => https://authentik.example.com/application/o/authorize
  • token_url => https://authentik.example.com/application/o/token
  • userinfo_url=> https://authentik.example.com/application/o/userinfo
OIDC is a standard, so the same values come from any OIDC provider. Okta, Microsoft Entra ID, Auth0 and Google Workspace all expose them, as do self-hosted providers such as Keycloak and Dex.
2

Configure POSTQUEEN_GENERIC_OAUTH

Set to true to enable OIDC login.
3

Configure display name

Will display the name of the OIDC provider on the login page.
4

Configure logo URL

Will display the logo of the OIDC provider on the login page button. Any publicly reachable image URL works.
5

Configure POSTQUEEN_OAUTH_AUTH_URL

The authorization URL of the OIDC provider.
6

Configure POSTQUEEN_OAUTH_TOKEN_URL

The token URL of the OIDC provider.
7

Configure POSTQUEEN_OAUTH_USERINFO_URL

The userinfo URL of the OIDC provider.
8

Configure POSTQUEEN_OAUTH_CLIENT_ID

The client ID of the OIDC provider.
9

Configure POSTQUEEN_OAUTH_CLIENT_SECRET

The client secret of the OIDC provider.