From 41e877188961e21ed5e1f5ea1318a89202c5f739 Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Wed, 7 Jan 2026 01:39:31 +0900
Subject: [PATCH] FIX(authelia): fix Headlamp OIDC token auth

- Change token_endpoint_auth_method to client_secret_basic
- Headlamp uses client_secret_basic by default
- Authelia was configured with client_secret_post
- Fix token exchange failure causing login redirect loop
---
 authelia/helm-values.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/authelia/helm-values.yaml b/authelia/helm-values.yaml
index e7cf89c..cf0f36f 100644
--- a/authelia/helm-values.yaml
+++ b/authelia/helm-values.yaml
@@ -131,7 +131,7 @@ configMap:
             - profile
             - email
             - groups
-          token_endpoint_auth_method: client_secret_post
+          token_endpoint_auth_method: client_secret_basic
         - client_id: vault
           client_name: Vault
           client_secret: