From e2da29cf25bc02e4c056358f4a0d70a6e94154f4 Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Sun, 23 Nov 2025 22:42:50 -0800
Subject: [PATCH] rssbridge: Use OpenID Connect instead of pubtkt based SSO

Tests:

- Functional tests work.

- Admin user is able to access the application

- User belonging to special group is able to access the application

- Regular user is not able to access the application

- Anonymous user is not able to access the application

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 .../freedombox/etc/apache2/conf-available/rss-bridge.conf   | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/plinth/modules/rssbridge/data/usr/share/freedombox/etc/apache2/conf-available/rss-bridge.conf b/plinth/modules/rssbridge/data/usr/share/freedombox/etc/apache2/conf-available/rss-bridge.conf
index 2c7e892ca..ee8cced26 100644
--- a/plinth/modules/rssbridge/data/usr/share/freedombox/etc/apache2/conf-available/rss-bridge.conf
+++ b/plinth/modules/rssbridge/data/usr/share/freedombox/etc/apache2/conf-available/rss-bridge.conf
@@ -15,10 +15,8 @@ Alias /rss-bridge /usr/share/rss-bridge
         </If>
         <Else>
             # Formats: Html and all other pages
-            Include includes/freedombox-single-sign-on.conf
-            <IfModule mod_auth_pubtkt.c>
-                TKTAuthToken "feed-reader" "admin"
-            </IfModule>
+            Use AuthOpenIDConnect
+            Use RequireGroup feed-reader
         </Else>
     </IfFile>
     <IfFile /etc/rss-bridge/is_public>