From f9ea96d5a179125e292bc8374f99103a6930dd44 Mon Sep 17 00:00:00 2001
From: Matt <matt@letsbe.solutions>
Date: Sat, 14 Jun 2025 14:22:27 +0200
Subject: [PATCH] Fix OIDC configuration structure - remove duplicate
 runtimeConfig and use proper callback URL from env var

---
 nuxt.config.ts | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/nuxt.config.ts b/nuxt.config.ts
index 4be29f0..8e311b1 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -106,6 +106,22 @@ export default defineNuxtConfig({
     }
   },
   runtimeConfig: {
+    openidConnect: {
+      op: {
+        issuer: process.env.KEYCLOAK_ISSUER || "https://auth.portnimara.dev/realms/client-portal",
+        clientId: process.env.KEYCLOAK_CLIENT_ID || "client-portal",
+        clientSecret: process.env.KEYCLOAK_CLIENT_SECRET || "",
+        callbackUrl: process.env.KEYCLOAK_CALLBACK_URL || "https://client.portnimara.dev/auth/callback",
+      },
+      config: {
+        cookieFlags: {
+          access_token: {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === 'production',
+          }
+        }
+      }
+    },
     nocodb: {
       url: "",
       token: "",
@@ -130,7 +146,7 @@ export default defineNuxtConfig({
       issuer: process.env.KEYCLOAK_ISSUER || "https://auth.portnimara.dev/realms/client-portal",
       clientId: process.env.KEYCLOAK_CLIENT_ID || "client-portal",
       clientSecret: process.env.KEYCLOAK_CLIENT_SECRET || "",
-      callbackUrl: "/auth/callback", // Use path only, not full URL
+      callbackUrl: process.env.KEYCLOAK_CALLBACK_URL || "https://client.portnimara.dev/auth/callback",
       scope: ["openid", "email", "profile"],
     },
     config: {