From 68126c3ec666a904551923e37fc5f5e5e3352b5c Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Mon, 24 Nov 2025 08:58:41 -0800
Subject: [PATCH] transmission: Use OpenID Connect instead of pubtkt based SSO

Tests:

- Functional tests work.

- Admin user is able to access the application

- User belonging to special group is able to access the application

- Regular user is not able to access the application

- Anonymous user is not able to access the application

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 .../etc/apache2/conf-available/transmission-plinth.conf     | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/plinth/modules/transmission/data/usr/share/freedombox/etc/apache2/conf-available/transmission-plinth.conf b/plinth/modules/transmission/data/usr/share/freedombox/etc/apache2/conf-available/transmission-plinth.conf
index a1e98a55c..a84402f61 100644
--- a/plinth/modules/transmission/data/usr/share/freedombox/etc/apache2/conf-available/transmission-plinth.conf
+++ b/plinth/modules/transmission/data/usr/share/freedombox/etc/apache2/conf-available/transmission-plinth.conf
@@ -19,10 +19,8 @@
         Require ldap-group cn=bit-torrent,ou=groups,dc=thisbox
     </If>
     <Else>
-        Include includes/freedombox-single-sign-on.conf
-        <IfModule mod_auth_pubtkt.c>
-            TKTAuthToken "admin" "bit-torrent"
-        </IfModule>
+        Use AuthOpenIDConnect
+        Use RequireGroup bit-torrent
     </Else>
 
     ## Send the scheme from user's request to enable Transmission to