Rewrite slash-less Authentik token endpoint to the canonical path

Add an exact-match URLRewrite rule on both identity HTTPRoutes so a POST to /application/o/token reaches the handler instead of Django's 405.
2026-09-19 15:58:12 +10:00
parent 4762cf9e03
commit 2e1fca808c
1 changed files with 32 additions and 0 deletions
@@ -37,6 +37,22 @@ spec:
      name: authentik
      sectionName: https
  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: authentik-server
+          port: 80
+          weight: 1
+      filters:
+        - type: URLRewrite
+          urlRewrite:
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: /application/o/token/
+      matches:
+        - path:
+            type: Exact
+            value: /application/o/token
    - backendRefs:
        - group: ""
          kind: Service
@@ -86,6 +102,22 @@ spec:
      name: authentik-internal
      sectionName: https
  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: authentik-server
+          port: 80
+          weight: 1
+      filters:
+        - type: URLRewrite
+          urlRewrite:
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: /application/o/token/
+      matches:
+        - path:
+            type: Exact
+            value: /application/o/token
    - backendRefs:
        - group: ""
          kind: Service