Unverified Commit 370a7b8d authored by K900's avatar K900 Committed by GitHub
Browse files

Merge pull request #307193 from K900/fix-oauth2-proxy-nginx 

nixos/oauth2_proxy_nginx: fix URL escaping
parents c8613033 d85147ea

nixos/modules/services/security/oauth2_proxy_nginx.nix

+2 −2
Original line number Diff line number Diff line
@@ -87,9 +87,9 @@ in 
        "/oauth2/auth" = let

          maybeQueryArg = name: value:

            if value == null then null

            else "${name}=${lib.concatStringsSep "," value}";

            else "${name}=${lib.concatStringsSep "," (builtins.map lib.escapeURL value)}";

          allArgs = lib.mapAttrsToList maybeQueryArg conf;

          cleanArgs = builtins.map lib.escapeURL (builtins.filter (x: x != null) allArgs);

          cleanArgs = builtins.filter (x: x != null) allArgs;

          cleanArgsStr = lib.concatStringsSep "&" cleanArgs;

        in {

          # nginx doesn't support passing query string arguments to auth_request,