| author |  clover caruso <git@paperclover.net> 2026-06-10 23:58:46-07:00 |
| committer | clover caruso <git@paperclover.net> 2026-06-11 01:38:21-07:00 |
| log | 1b6b7e37ee12a6a3a292da203faa6768d49919a7 |
| tree | 22b2452f1032a007e180080ff6eeeefb6db99fb5 |
| parent | c5477a134a7b0043dc4658dcfe6a5e95403a60fd |
| signature |  Signed by SSH key SHA256:xbd+BjjhyBfwk7GVoURf9Yx0gzDerHbvYv7SddNWmAs |
fix: forgejo oauth scopes flag syntax
unquoted --scopes=openid email profile groups passed email/profile/
groups as stray positional args; forgejo 13 CLI hard-errors on them,
crash-looping the container on every restart. keycloak also rejects
scopes beyond openid for this client, so request openid only (matches
the login_source config that ran in prod).1 files changed, 1 insertions(+), 1 deletions(-)
config/forgejo/init/config.sh+1-1
| ... | @@ -8,7 +8,7 @@ openid_args="--provider=openidConnect \ | ... | @@ -8,7 +8,7 @@ openid_args="--provider=openidConnect \ |
| 8 | --key=forgejo \ | 8 | --key=forgejo \ |
| 9 | --secret=$FORGEJO_OPENID_SECRET \ | 9 | --secret=$FORGEJO_OPENID_SECRET \ |
| 10 | --auto-discover-url=https://auth.$HOME_DOMAIN/realms/master/.well-known/openid-configuration \ | 10 | --auto-discover-url=https://auth.$HOME_DOMAIN/realms/master/.well-known/openid-configuration \ |
| 11 | --scopes=openid email profile groups" | 11 | --scopes=openid" |
| 12 | 12 | ||
| 13 | forgejo migrate | 13 | forgejo migrate |
| 14 | 14 |