maziggy aef4f3a3e9 fix(oidc): strip the required BAMBUDDY_OIDC_* values and register the local-login bypass ...

A Kubernetes Secret written as a block scalar carries a trailing newline, and
the schema bounds the four required variables by max_length only, so an
unstripped issuer_url was stored and enabled and then raised httpx.InvalidURL
on the first click of the SSO button -- the authorize-time failure the
all-or-nothing rule exists to prevent. Whitespace-only values got through the
same way, contradicting the reader's own "an empty required var counts as
unset". The optional variables have always treated blank as unset; the
required ones now do too.

Also registers BAMBUDDY_LOCAL_LOGIN (#1589) in the typo guard, which logged
"possible typo" for it on every boot while listing every BAMBUDDY_OIDC_*
variable as legitimate.

2026-08-01 11:37:01 +02:00

..

app

fix(oidc): strip the required BAMBUDDY_OIDC_* values and register the local-login bypass

2026-08-01 11:37:01 +02:00

tests

fix(oidc): strip the required BAMBUDDY_OIDC_* values and register the local-login bypass

2026-08-01 11:37:01 +02:00

__init__.py

…