Pocket ID Support

[Akorian]

Enhancement

👋 I just set up Lychee in a test environment. Since I am an avid user of PocketID, I tested if I could configure it. Even though, there is no direct compatibility, it worked marvelously. There were just two small things I had to do.

1. I had to create a redirection from /api/oidc/authorization to /authorize at the reverse proxy for my PocketID instance.

 # Caddy Example: 
 pocketid.domain.tld {
+    # Compatibility for Lychee's Authelia OIDC provider to work with PocketID
+    rewrite /api/oidc/authorization /authorize

     reverse_proxy pocket-id:1411
 }

2. Set the Callback URL in the Pocket ID OIDC Client for Lychee to https://lychee.domain.tld/auth/authelia/redirect

Appart from that, it was the same setup as with any other OIDC Client.
Create Client on Pocket ID side, fill in these env vars in lychee's .env

AUTHELIA_BASE_URL=https://pocketid.domain.tld
AUTHELIA_CLIENT_ID=xxxx
AUTHELIA_CLIENT_SECRET=yyyy
AUTHELIA_REDIRECT_URI=/auth/authelia/redirect

Now, if you try to login, Lychee will not find a user for you. Afaik there is no env var, we can set up for JIT. But we can go into the Webinterface > Admin > Settings > Advanced Section > User Management then:
Turn ON Allow user creation when oauth id does not exist.

---

As you can see, the authelia provider in Lychee alrady does 99.9% of what is needed. Thus, I'd hope to see a native PocketID implementation, so users won't need to find such workarounds as I did.

[ildyria]

There seems to be a pocketId provider for socialite:
https://github.com/SocialiteProviders/PocketID

So you could simply follow:
https://github.com/LycheeOrg/Lychee/blob/master/docs/specs/2-how-to/add-oauth-provider.md :)

If you open a PR with a good start, it is likely to be merged. :)

[ildyria]

merged in master.