How to configure casdoor for windows deployment? I deployed but always show UNAUTHORIZED

[WaterYue]

I try to deploy lobe-chat on windows, and I already deployed casdoor on my laptop (winddows), but even I configured AUTH_CASDOOR_ID, AUTH_CASDOOR_SECRET, AUTH_CASDOOR_ISSUER...as the guide, the lobe-chat always show UNAUTHORIZED.

I followed the below guide but the file structs already changed:
https://github.com/lobehub/lobe-chat/blob/main/contributing/Basic/Add-New-Authentication-Providers.md

would you please help clarify what other places I need to modify to use the casdoor, or disable the 3rd-party auth totally. Thank you!

[cy948]

Please paste some log from lobe-chat container.

[WaterYue]

Hi @cy948, I paste the log, would you please help to take a look, thank you!

[WaterYue]

the guide says: Step 1: Add Authenticator Core Code, but I cannot find file src/app/api/auth/next-auth.ts;
For the step 2: it says the app.ts is in src/config/server/app.ts, but I found it in src/config/app.ts, and cannot find auth related param definiation, and also for the Step 3: Change Frontend Pages， there's no src/app/settings/common/Common.tsx.

So I only changed params in .env.
Here is the error log when running lobe-chat on windows env (not docker):
(it seems cannot get the clientId and secret at the beginning, but I don't know how to fix it)

@lobehub/[email protected] start
next start -p 3210

▲ Next.js 15.1.6

• Local: http://localhost:3210
• Network: http://10.200.83.28:3210

✓ Starting...
✓ Ready in 1287ms
{
allowDangerousEmailAccountLinking: true,
clientId: undefined,
clientSecret: undefined,
platformType: 'WebsiteApp',
profile: [Function: profile]
}
(node:16220) [DEP0040] DeprecationWarning: The punycode module is deprecated. Please use a userland alternative instead.
(Use node --trace-deprecation ... to show where the warning was created)
{
allowDangerousEmailAccountLinking: true,
clientId: undefined,
clientSecret: undefined,
platformType: 'WebsiteApp',
profile: [Function: profile]
}
[rewrite] / -> /en-US__0__light
next auth: undefined
next auth: undefined
next auth: undefined
{"level":30,"time":1739237613348,"pid":16220,"hostname":"XIA-WYUE-LT","msg":"Error in tRPC handler (lambda) on path: agent.getAgentConfig, type: query"}
Error [TRPCError]: UNAUTHORIZED
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\39403.js:1:12654)
at f (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:4:74)
at r (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:1:6017)
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7949)
at Array.map ()
at g (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7486)
at async n (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\app(backend)\trpc\lambda[trpc]\route.js:1:4276) {
cause: undefined,
code: 'UNAUTHORIZED'
}
Error [TRPCError]: UNAUTHORIZED
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\39403.js:1:12654)
at f (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:4:74)
at r (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:1:6017)
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7949)
at Array.map ()
at g (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7486)
at async n (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\app(backend)\trpc\lambda[trpc]\route.js:1:4276) {
cause: undefined,
code: 'UNAUTHORIZED'
}
Error [TRPCError]: UNAUTHORIZED
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\39403.js:1:12654)
at f (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:4:74)
at r (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:1:6017)
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7949)
at Array.map ()
at g (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7486)
at async n (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\app(backend)\trpc\lambda[trpc]\route.js:1:4276) {
cause: undefined,
code: 'UNAUTHORIZED'
}
{"level":30,"time":1739237613352,"pid":16220,"hostname":"XIA-WYUE-LT","msg":"Error in tRPC handler (lambda) on path: aiProvider.getAiProviderRuntimeState, type: query"}
{"level":30,"time":1739237613353,"pid":16220,"hostname":"XIA-WYUE-LT","msg":"Error in tRPC handler (lambda) on path: user.getUserState, type: query"}
next auth: undefined
next auth: undefined
{"level":30,"time":1739237618408,"pid":16220,"hostname":"XIA-WYUE-LT","msg":"Error in tRPC handler (lambda) on path: agent.getAgentConfig, type: query"}
Error [TRPCError]: UNAUTHORIZED
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\39403.js:1:12654)
at f (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:4:74)
at r (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:1:6017)
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7949)
at Array.map ()
at g (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7486)
at async n (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\app(backend)\trpc\lambda[trpc]\route.js:1:4276) {
cause: undefined,
code: 'UNAUTHORIZED'
}
Error [TRPCError]: UNAUTHORIZED
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\39403.js:1:12654)
at f (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:4:74)
at r (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\33378.js:1:6017)
at (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7949)
at Array.map ()
at g (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\chunks\45276.js:1:7486)
at async n (D:\medDispenseAI\lobe-chat\lobe-chat.next\server\app(backend)\trpc\lambda[trpc]\route.js:1:4276) {
cause: undefined,
code: 'UNAUTHORIZED'
}
{"level":30,"time":1739237618408,"pid":16220,"hostname":"XIA-WYUE-LT","msg":"Error in tRPC handler (lambda) on path: aiProvider.getAiProviderRuntimeState, type: query"}
...

[cy948]

Casdoor already supportrd, you can follow https://lobehub.com/docs/self-hosting/advanced/auth and https://lobehub.com/docs/self-hosting/advanced/auth/next-auth/casdoor to add it.

[WaterYue]

Yes, I followed the guide, and also, I followed another guide to use Microsoft Entra ID, still the same issue: the guide only said which env param I need to configure, but there's no any instruction says how to change the source code.
Or If I want to disable 3rd-party auth, how to configure it, set NEXT_AUTH_SECRET , NEXT_PUBLIC_ENABLE_NEXT_AUTH , and NEXTAUTH_URL is not enough.

[cy948]

If you need to connect a new SSO provider we not supported yet, you can refer to previous PR for codes by searching keywords like logto .