From 3c1d801e1559930ecdc8efa3996c108171f0bbf9 Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Sun, 23 Nov 2025 22:43:46 -0800
Subject: [PATCH] email: Use OpenID Connect instead of pubtkt based SSO

Tests:

- Functional tests work.

- Admin user is able to access the application

- Regular user is not able to access the application

- Anonymous user is not able to access the application

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 .../etc/apache2/conf-available/email-freedombox.conf         | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/plinth/modules/email/data/usr/share/freedombox/etc/apache2/conf-available/email-freedombox.conf b/plinth/modules/email/data/usr/share/freedombox/etc/apache2/conf-available/email-freedombox.conf
index 59421bc7e..88c8d49d8 100644
--- a/plinth/modules/email/data/usr/share/freedombox/etc/apache2/conf-available/email-freedombox.conf
+++ b/plinth/modules/email/data/usr/share/freedombox/etc/apache2/conf-available/email-freedombox.conf
@@ -14,10 +14,7 @@
     ProxyAddHeaders off
 
     # Require SSO
-    Include includes/freedombox-single-sign-on.conf
-    <IfModule mod_auth_pubtkt.c>
-        TKTAuthToken "admin"
-    </IfModule>
+    Use AuthOpenIDConnect
 </Location>
 
 # Automatic configuration for clients like Thunderbird: