Commit 3b61c5

2025-04-05 14:46:04 Hargata Softworks: x
advanced/openid.md ..
@@ 91,3 91,29 @@
Failed Claim Validation(no email returned from OpenID Provider):
![](/Advanced/OpenID/a/image-1743433568647.png)
+
+ #### Authelia >= v4.39
+
+ There are [breaking changes](https://www.authelia.com/integration/openid-connect/openid-connect-1.0-claims/#restore-functionality-prior-to-claims-parameter) for users using Authelia with version >= 4.39
+
+ This is because LubeLogger utilizes the legacy method of retrieving the email claim via the id_token, which Authelia has deprecated as of v4.39, a workaround is outlined in the article linked above until we're able to future-proof the OpenID auth flow used by LubeLogger:
+
+ Authelia config in identity_providers:
+
+ ```
+ identity_providers:
+ oidc:
+ claims_policies:
+ legacy_claims:
+ id_token: ['email', 'email_verified', 'preferred_username', 'name']
+ ...
+ ```
+
+ Authelia config for LubeLogger client:
+
+ ```
+ - client_id: lubelogger
+ client_name: "Lube Logger"
+ ...
+ claims_policy: "legacy_claims"
+ ```
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9