SSO Using Authentik exception

[LilTrublMakr]

Hello all,

I am trying to integrate SSO using Authentik using Authentik's doc. I followed everything there with the exception of the roles section at the very bottom of that page (because I am unsure on where to put it) and restarted the Netbox service. When I log out, I do see the "OpenID Connect" button for SSO, but when I click it, I get the following exception:

Environment:


Request Method: GET
Request URL: http://sub.domain.tld/oauth/login/oidc/?next=%2F

Django Version: 5.0.9
Python Version: 3.11.4
Installed Applications:
['django.contrib.auth',
 'django.contrib.contenttypes',
 'django.contrib.sessions',
 'django.contrib.messages',
 'django.contrib.staticfiles',
 'django.contrib.humanize',
 'django.forms',
 'corsheaders',
 'debug_toolbar',
 'django_filters',
 'django_htmx',
 'django_tables2',
 'django_prometheus',
 'strawberry_django',
 'mptt',
 'rest_framework',
 'social_django',
 'taggit',
 'timezone_field',
 'core',
 'account',
 'circuits',
 'dcim',
 'ipam',
 'extras',
 'tenancy',
 'users',
 'utilities',
 'virtualization',
 'vpn',
 'wireless',
 'django_rq',
 'drf_spectacular',
 'drf_spectacular_sidecar',
 'netbox_proxbox.ProxboxConfig',
 'netbox_inventory.NetBoxInventoryConfig',
 'netbox_metatype_importer.NetBoxMetatypeImporterConfig',
 'netbox_kea.NetBoxKeaConfig',
 'netbox_svm.SVMConfig',
 'netbox_device_view.NetBoxDeviceViewConfig']
Installed Middleware:
['strawberry_django.middlewares.debug_toolbar.DebugToolbarMiddleware',
 'corsheaders.middleware.CorsMiddleware',
 'django.contrib.sessions.middleware.SessionMiddleware',
 'django.middleware.locale.LocaleMiddleware',
 'django.middleware.common.CommonMiddleware',
 'django.middleware.csrf.CsrfViewMiddleware',
 'django.contrib.auth.middleware.AuthenticationMiddleware',
 'django.contrib.messages.middleware.MessageMiddleware',
 'django.middleware.clickjacking.XFrameOptionsMiddleware',
 'django.middleware.security.SecurityMiddleware',
 'django_htmx.middleware.HtmxMiddleware',
 'netbox.middleware.RemoteUserMiddleware',
 'netbox.middleware.CoreMiddleware',
 'netbox.middleware.MaintenanceModeMiddleware']



Traceback (most recent call last):
  File "/opt/netbox/venv/lib/python3.11/site-packages/django/core/handlers/exception.py", line 55, in inner
    response = get_response(request)
               ^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/django/core/handlers/base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/django/views/decorators/cache.py", line 80, in _view_wrapper
    response = view_func(request, *args, **kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_django/utils.py", line 63, in wrapper
    return func(request, backend, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_django/utils.py", line 49, in wrapper
    return func(request, backend, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_django/views.py", line 23, in auth
    return do_auth(request.backend, redirect_name=REDIRECT_FIELD_NAME)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/actions.py", line 34, in do_auth
    return backend.start()
           ^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/backends/base.py", line 34, in start
    return self.strategy.redirect(self.auth_url())
                                  ^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/backends/oauth.py", line 352, in auth_url
    params = self.auth_params(state)
             ^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/backends/open_id_connect.py", line 132, in auth_params
    params["nonce"] = self.get_and_store_nonce(self.authorization_url(), state)
                                               ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/backends/open_id_connect.py", line 73, in authorization_url
    ) or self.oidc_config().get("authorization_endpoint")
         ^^^^^^^^^^^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/utils.py", line 308, in wrapped
    cached_value = fn(this)
                   ^^^^^^^^
  File "/opt/netbox/venv/lib/python3.11/site-packages/social_core/backends/open_id_connect.py", line 114, in oidc_config
    return self.get_json(self.oidc_endpoint() + "/.well-known/openid-configuration")
                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Exception Type: TypeError at /oauth/login/oidc/
Exception Value: unsupported operand type(s) for +: 'NoneType' and 'str'

Relevant config:

# Remote authentication support
REMOTE_AUTH_ENABLED = True
REMOTE_AUTH_BACKEND = 'social_core.backends.open_id_connect.OpenIdConnectAuth'
REMOTE_AUTH_HEADER = 'HTTP_REMOTE_USER'
REMOTE_AUTH_USER_FIRST_NAME = 'HTTP_REMOTE_USER_FIRST_NAME'
REMOTE_AUTH_USER_LAST_NAME = 'HTTP_REMOTE_USER_LAST_NAME'
REMOTE_AUTH_USER_EMAIL = 'HTTP_REMOTE_USER_EMAIL'
REMOTE_AUTH_AUTO_CREATE_USER = False
REMOTE_AUTH_DEFAULT_GROUPS = []
REMOTE_AUTH_DEFAULT_PERMISSIONS = {}

/opt/netbox/netbox/netbox/config/authentik.py:

from os import environ

# NetBox settings
REMOTE_AUTH_ENABLED = True
REMOTE_AUTH_BACKEND = 'social_core.backends.open_id_connect.OpenIdConnectAuth'

# python-social-auth configuration
SOCIAL_AUTH_OIDC_ENDPOINT = 'https://auth.domain.tld/application/o/netbox/'
SOCIAL_AUTH_OIDC_KEY = 'redacted'
SOCIAL_AUTH_OIDC_SECRET = 'redacted'
LOGOUT_REDIRECT_URL = 'https://auth.domain.tld/application/o/netbox/end-session/'

/opt/netbox/netbox/netbox/custom_pipeline.py is a copy and paste from the Authentik doc. SOCIAL_AUTH_PIPELINE() was added to the config file as a copy and paste as well.

This is on Ubuntu 24.04 and installed on the system; NOT using Docker. I have not created any custom groups or anything like that. Any help on this matter would be appreciated.

[samip5]

The doc on Authentik's site is out of date.

The SSO config should replace the extra config: /etc/netbox/config/extra.py instead and in the case of not docker, it should be placed near the configuration_example.py.