Lucas BergerandClaude Sonnet 4.6 22d1581484 fix(12): IN-01 require https:// on appExternalUrl in configSchema ...

appExternalUrl is injected as OIDC_AUTH_EXTERNAL_URL (the redirect URI
base); Authelia rejects non-https redirect URIs in production. Added
.refine() guard matching the existing oidcIssuer pattern. Added test
that verifies http:// appExternalUrl is rejected with 400.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-15 16:37:03 -04:00

..

api

fix(12): IN-01 require https:// on appExternalUrl in configSchema

2026-06-15 16:37:03 -04:00

pwa

fix(12): IN-04 trim email before sending to /api/setup/credential

2026-06-15 16:22:47 -04:00