From ce62fdb142a083aef41ae5bb4dbe28b39888c007 Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Sun, 23 Nov 2025 22:40:58 -0800
Subject: [PATCH] searx: Use OpenID Connect instead of pubtkt based SSO

Tests:

- Application is not installable in stable and testing. It is not functional in
unstable.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 .../etc/apache2/conf-available/searx-freedombox-auth.conf | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/plinth/modules/searx/data/usr/share/freedombox/etc/apache2/conf-available/searx-freedombox-auth.conf b/plinth/modules/searx/data/usr/share/freedombox/etc/apache2/conf-available/searx-freedombox-auth.conf
index 86c4e727b..b65db00ba 100644
--- a/plinth/modules/searx/data/usr/share/freedombox/etc/apache2/conf-available/searx-freedombox-auth.conf
+++ b/plinth/modules/searx/data/usr/share/freedombox/etc/apache2/conf-available/searx-freedombox-auth.conf
@@ -1,9 +1,5 @@
 <Location /searx/>
-    Include includes/freedombox-single-sign-on.conf
-
-    <IfModule mod_auth_pubtkt.c>
-        TKTAuthToken "web-search" "admin"
-    </IfModule>
-
     ProxyPass unix:/run/uwsgi/app/searx/socket|uwsgi://uwsgi-uds-searx/
+    Use AuthOpenIDConnect
+    Use RequireGroup web-search
 </Location>