[25.05] Backport nixos/kanidm: accept originUrls following rfc8252 (#429527)

2026-01-12 02:40:31 +08:00 · 2025-08-02 22:14:05 +08:00
parent ecfd0d9206 4fd3a59d8a
commit eb3085f230
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/security/kanidm.nix
+++ b/nixos/modules/services/security/kanidm.nix
@@ -548,7 +548,7 @@ in
                description = "The redirect URL of the service. These need to exactly match the OAuth2 redirect target";
                type =
                  let
-                    originStrType = types.strMatching ".*://.*$";
+                    originStrType = types.strMatching ".*://?.*$";
                  in
                  types.either originStrType (types.nonEmptyListOf originStrType);
                example = "https://someservice.example.com/auth/login";