From 43a8814e0269a034cf1e6660091ce2fceb4e30e1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Germ=C3=A1n=20Mart=C3=ADn?= <github@gmartin.net>
Date: Sat, 22 Nov 2025 14:01:48 +0100
Subject: [PATCH] Enhance OIDC strategy options and add OIDC_SCOPE to
 environment interface

---
 apps/api/src/app/auth/auth.module.ts            | 17 +++++++++++++++--
 .../interfaces/environment.interface.ts         |  1 +
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/apps/api/src/app/auth/auth.module.ts b/apps/api/src/app/auth/auth.module.ts
index be91058f4..0e8a1dc16 100644
--- a/apps/api/src/app/auth/auth.module.ts
+++ b/apps/api/src/app/auth/auth.module.ts
@@ -51,7 +51,16 @@ import { OidcStrategy } from './oidc.strategy';
           .map((s) => s.trim())
           .filter((s) => s.length > 0);
 
-        const options: any = {
+        const options: {
+          authorizationURL?: string;
+          callbackURL: string;
+          clientID: string;
+          clientSecret: string;
+          issuer?: string;
+          scope: string[];
+          tokenURL?: string;
+          userInfoURL?: string;
+        } = {
           callbackURL: `${configurationService.get(
             'ROOT_URL'
           )}/api/auth/oidc/callback`,
@@ -65,7 +74,11 @@ import { OidcStrategy } from './oidc.strategy';
             const response = await fetch(
               `${issuer}/.well-known/openid-configuration`
             );
-            const config = await response.json();
+            const config = (await response.json()) as {
+              authorization_endpoint: string;
+              token_endpoint: string;
+              userinfo_endpoint: string;
+            };
 
             options.authorizationURL = config.authorization_endpoint;
             options.issuer = issuer;
diff --git a/apps/api/src/services/interfaces/environment.interface.ts b/apps/api/src/services/interfaces/environment.interface.ts
index 10988bbcd..c6223d1c3 100644
--- a/apps/api/src/services/interfaces/environment.interface.ts
+++ b/apps/api/src/services/interfaces/environment.interface.ts
@@ -37,6 +37,7 @@ export interface Environment extends CleanedEnvAccessors {
   OIDC_CLIENT_ID: string;
   OIDC_CLIENT_SECRET: string;
   OIDC_ISSUER: string;
+  OIDC_SCOPE: string;
   OIDC_TOKEN_URL: string;
   OIDC_USER_INFO_URL: string;
   PORT: number;