nixos/kanidm: accept originUrls following rfc8252 (#428204)

2026-01-11 18:32:23 +08:00 · 2025-07-25 22:41:26 +10:00
parent 892b920a25
commit 0d25584641
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/security/kanidm.nix
+++ b/nixos/modules/services/security/kanidm.nix
@@ -548,7 +548,7 @@ in
                description = "The redirect URL of the service. These need to exactly match the OAuth2 redirect target";
                type =
                  let
-                    originStrType = types.strMatching ".*://.*$";
+                    originStrType = types.strMatching ".*://?.*$";
                  in
                  types.either originStrType (types.nonEmptyListOf originStrType);
                example = "https://someservice.example.com/auth/login";