From 1b6b7e37ee12a6a3a292da203faa6768d49919a7 Mon Sep 17 00:00:00 2001 From: clover caruso Date: Wed, 10 Jun 2026 23:58:46 -0700 Subject: [PATCH] fix: forgejo oauth scopes flag syntax unquoted --scopes=openid email profile groups passed email/profile/ groups as stray positional args; forgejo 13 CLI hard-errors on them, crash-looping the container on every restart. keycloak also rejects scopes beyond openid for this client, so request openid only (matches the login_source config that ran in prod). --- config/forgejo/init/config.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/forgejo/init/config.sh b/config/forgejo/init/config.sh index f00645f743c6ab861bc3a8b77374ed0a918453a8..0c61ca76cc6ad7b9406ae1d5bf10c1bf8f6d5a91 100644 --- a/config/forgejo/init/config.sh +++ b/config/forgejo/init/config.sh @@ -8,7 +8,7 @@ openid_args="--provider=openidConnect \ --key=forgejo \ --secret=$FORGEJO_OPENID_SECRET \ --auto-discover-url=https://auth.$HOME_DOMAIN/realms/master/.well-known/openid-configuration \ ---scopes=openid email profile groups" +--scopes=openid" forgejo migrate -- 2.54.0