Audiobookshelf

The following example variables are used, and should be replaced with your actual URLs.

• audiobookshelf.example.com (The URL of your Audiobookshelf instance.)
• id.example.com (The URL of your Pocket ID instance.)

Pocket-ID setup

1. In Pocket-ID create a new OIDC Client, name it, for example audiobookshelf
2. Set a logo for this OIDC Client if you would like to.
3. Set the callback URLs to: https://audiobookshelf.example.com/auth/openid/callback and add another one, for the mobile app to https://audiobookshelf.example.com/auth/openid/mobile-redirect.
4. Copy the Client ID and Client Secret for use in the next steps.

Audiobookshelf setup

1. Log in to Audiobookshelf as an admin.
2. Go to Settings → Authentication check the checkbox for OpenID Connect Authentication
3. In the field Issuer URL put id.example.com and click on Auto-Populate, this should automatically populate all the other URL fields.
4. Enter the Client ID.
5. Enter the Client Secret.
6. Change the Subfolder for Redirect URLs according to how you configured Audiobookshelf. In this example change it to None, if you are using a dedicated subdomain for it.
7. Change Match existing users by, to what you want it to match an OIDC user with an existing (Audiobookshelf) user by.
8. Toggle Auto Register to true, if you want to create a new user if it does not exist.
9. Configure the group claim if you want.

   [!CAUTION] If you configure group claim, you will not be able to sign in as user. If you're not part of admin, user or guest.

10. Configure the abspermissions claim if you want.

[!CAUTION] If you configure abspermissions, you will not be able to sign in as a normal user. If your configuration for it is not valid or not configured.

Group Claim

If you want to automatically assign permissions based on group membership.

Audiobookshelf

Set the Group Claim under Settings → Authentication → OpenID Connect Authentication → Group Claim to groups.

Pocket-ID

Create a group admin, user or guest via User Groups → Add Group. Add the users depending on what permissions you want them to have to the groups.

Advanced Permission Claim

Audiobookshelf

Set the Advanced permission Claim under Settings → Authentication → OpenID Connect Authentication → Advanced Permission Claim to abspermissions.

Pocket-ID

1. Create a custom claim for the group yourgroupname under User Groups → Manage User Groups → yourgroupname → ... → Edit → Custom Claims → + Add custom claim.
2. Set Key to abspermissions
3. set value to a valid JSON like this:

Little explanation of the abspermissions:

Sources

• https://www.audiobookshelf.org/guides/oidc_authentication
• https://www.audiobookshelf.org/guides/users#access-control
• https://api.audiobookshelf.org/#libraries