From 579d736dd73484b6bf77f47ca95e27990577c165 Mon Sep 17 00:00:00 2001
From: cl0vrfi3ld <47996003+cl0vrfi3ld@users.noreply.github.com>
Date: Wed, 2 Jul 2025 09:39:28 -0400
Subject: [PATCH] actual: test forcing oidc-only auth (no password) when sso is
 enabled

---
 sp-modules/actual/module.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sp-modules/actual/module.nix b/sp-modules/actual/module.nix
index 733391d..53f5c60 100644
--- a/sp-modules/actual/module.nix
+++ b/sp-modules/actual/module.nix
@@ -192,8 +192,8 @@ in
       (lib.mkIf is-auth-enabled {
         services.actual = {
           settings = {
-            # permit openid logins
-            allowedLoginMethods = [ "openid" ];
+            # only permit openid logins
+            allowedLoginMethods = lib.mkForce [ "openid" ];
             # default to openid if enabled
             loginMethod = "openid";
             # SSO config