From 5deb8763a74c5c027b7e3570179e0ece8f5f1f43 Mon Sep 17 00:00:00 2001
From: Vladimir D <vladimir@brandlight.org>
Date: Thu, 17 Oct 2024 14:33:29 +0400
Subject: [PATCH] OIDC settings updated

---
 env.template | 1 +
 start.sh     | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/env.template b/env.template
index e807045..2ce6c15 100644
--- a/env.template
+++ b/env.template
@@ -41,6 +41,7 @@ OIDC_REDIRECT_URI=
 OIDC_DISCOVERY=
 OIDC_SCOPE=
 OIDC_UID_FIELD=
+OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=
 
 # Application secrets
 SECRET_KEY_BASE=
diff --git a/start.sh b/start.sh
index f8d6c18..427e148 100755
--- a/start.sh
+++ b/start.sh
@@ -40,7 +40,7 @@ if [[ -n "${CLOUDRON_OIDC_ISSUER:-}" ]]; then
         -e "s/OIDC_REDIRECT_URI=.*/OIDC_REDIRECT_URI=${CLOUDRON_APP_ORIGIN//\//\\\/}\/auth\/auth\/openid_connect\/callback/g" \
         -e "s/OIDC_DISCOVERY=.*/OIDC_DISCOVERY=true/g" \
         -e "s/OIDC_SCOPE=.*/OIDC_SCOPE=openid,profile,email/g" \
-        -e "s/OIDC_UID_FIELD=.*/OIDC_UID_FIELD=sub/g" \
+        -e "s/OIDC_UID_FIELD=.*/OIDC_UID_FIELD=preferred_username/g" \
         -e "s/OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=.*/OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=true/g" \
         -i /app/data/env.production
 fi