actual: test forcing oidc-only auth (no password) when sso is enabled

2025-07-02 09:39:28 -04:00
parent 0afdf018f9
commit 579d736dd7
1 changed files with 2 additions and 2 deletions
--- a/sp-modules/actual/module.nix
+++ b/sp-modules/actual/module.nix
@@ -192,8 +192,8 @@ in
      (lib.mkIf is-auth-enabled {
        services.actual = {
          settings = {
-            # permit openid logins
-            allowedLoginMethods = [ "openid" ];
+            # only permit openid logins
+            allowedLoginMethods = lib.mkForce [ "openid" ];
            # default to openid if enabled
            loginMethod = "openid";
            # SSO config