github-personal/helm-charts
1
0
Fork 0
mirror of https://github.com/shadoll/helm-charts.git synced 2026-10-13 06:09:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

traefik-forward-auth: send PKCE code_challenge, default on

Browse Source 
Pocket ID rejects the authorization request outright when its OIDC client
has PKCE required -- "This client requires PKCE, but the 'code_challenge'
parameter is missing" -- which is the default for clients created in recent
Pocket ID versions. Every app behind the portal fails at login, not just
the one being tested.

Upstream supports this via the pocketID provider's enablePKCE flag; the
chart never emitted it, so it stayed at its false default. Adds it to the
normalised portal shape (per-portal override via portals[].pocketID.enablePKCE)
and defaults it on, since PKCE is harmless when the client does not require it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
sha
2026-09-22 02:39:14 +03:00
co-authored by Claude Opus 5
parent da79d63d49
commit f0d7c1f474
4 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
traefik-forward-auth/Chart.yaml
+1 -1
View File
@@ -2,7 +2,7 @@ apiVersion: v2
name: traefik-forward-auth
description: Forward auth for Traefik (ItalyPaleAle/traefik-forward-auth) with Pocket ID provider
type: application
version: 0.2.0
version: 0.2.1
appVersion: "4.14.1"
annotations:
version-source: github-release:ItalyPaleAle/traefik-forward-auth