Added Authentik! Still working on Microsoft Entra ID

packages/backend/convex/auth.ts

@@ -9,9 +9,28 @@ import { api } from './_generated/api';
 import { type Id } from './_generated/dataModel';
 import { action, mutation, query } from './_generated/server';
 import Password from './CustomPassword';
+import Authentik from '@auth/core/providers/authentik';
+import MicrosoftEntraID from '@auth/core/providers/microsoft-entra-id'
 
 export const { auth, signIn, signOut, store, isAuthenticated } = convexAuth({
-  providers: [Password],
+  providers: [
+    Password,
+    Authentik,
+    MicrosoftEntraID({
+      clientId: process.env.AUTH_MICROSOFT_ENTRA_ID_ID!,
+      clientSecret: process.env.AUTH_MICROSOFT_ENTRA_ID_SECRET!,
+      // Either a tenant GUID, or "common" / "organizations" / "consumers"
+      issuer: process.env.AUTH_MICROSOFT_ENTRA_ID_ISSUER!,
+      // Optional, but providing an object prevents the undefined read:
+      profilePhotoSize: 48,
+      // Optional: request email + offline refresh
+      authorization: {
+        params: {
+          scope: 'openid profile email offline_access',
+        },
+      },
+    }),
+  ]
 });
 
 export const PASSWORD_MIN = 8;