fix!: do not allow insecure oauth requests by default (#27844)

* fix!: do not allow insecure oauth requests by default

* fix: format

* fix: make open-api

* fix: tests

* nit: casing

* chore: migration to allow insecure if current oauth uses http
This commit is contained in:
bo0tzz
2026-04-16 16:11:58 +02:00
committed by GitHub
parent 9c642bd6fc
commit 3356e81c85
11 changed files with 77 additions and 3 deletions
@@ -174,6 +174,14 @@
isEdited={!(configToEdit.oauth.timeout === config.oauth.timeout)}
/>
<SettingSwitch
title={$t('admin.oauth_allow_insecure_requests')}
subtitle={$t('admin.oauth_allow_insecure_requests_description')}
bind:checked={configToEdit.oauth.allowInsecureRequests}
disabled={disabled || !configToEdit.oauth.enabled}
isEdited={!(configToEdit.oauth.allowInsecureRequests === config.oauth.allowInsecureRequests)}
/>
<SettingInputField
inputType={SettingInputFieldType.TEXT}
label={$t('admin.oauth_storage_label_claim')}