From e92922d1a17ef62079888f49c34a3ee027b98b73 Mon Sep 17 00:00:00 2001
From: Alexander Tomokhov <alexoundos@selfprivacy.org>
Date: Wed, 16 Apr 2025 22:23:30 +0400
Subject: [PATCH] forgejo,auth: enablePkce when forgejo version is at least 8.0

---
 sp-modules/gitea/module.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sp-modules/gitea/module.nix b/sp-modules/gitea/module.nix
index 29189e7..a415af1 100644
--- a/sp-modules/gitea/module.nix
+++ b/sp-modules/gitea/module.nix
@@ -396,7 +396,7 @@ in
           "https://${cfg.subdomain}.${sp.domain}/user/login?redirect_to=%2f";
         originUrl = redirect-uri;
         clientSystemdUnits = [ "forgejo.service" ];
-        enablePkce = false; # FIXME maybe Forgejo supports PKCE?
+        enablePkce = lib.versionAtLeast forgejoPackage.version "8.0";
         linuxUserOfClient = linuxUserOfService;
         linuxGroupOfClient = linuxGroupOfService;
         claimMaps.groups = {