Authentik, Forward Auth and Unauthenticated Paths

[watn3y]

Hi there,

I am using Filebrowser Quantum with Authentik OIDC.

Since this project is still relatively new to me I decided to put traefik's forward_auth in front of it as an extra layer of security. This way I can catch any unauthenticated requests before they reach Filebrowser. I'm not suggesting that there are any issues with security, but its better to be safe than sorry :)

Of course, this breaks sharing files, which is why in the OG Filebrowser I was previously using

^/share/.*
^/static/.*
^/api/public/.*

in Authentik's Unauthenticated Paths Setting.

Are these still the correct paths to use? Or did this fork make any changes/additions?

[gtsteffaniak]

I'd recommend checking out the swagger docs when you run your filebrowser instance

And also note there's a /public/ prefix that expects to not have auth.

Also see #473

This is currently how it works, you'll see that on the swagger docs

https://github.com/gtsteffaniak/filebrowser/wiki/API