From 2a6bfe079c663f50418db5885743b7dbc4a8a217 Mon Sep 17 00:00:00 2001 From: Josh Date: Sun, 2 Aug 2026 13:14:08 -0400 Subject: [PATCH 1/2] fix(auth): parse OIDC account linking flag as boolean Parse OIDC_ALLOW_DANGEROUS_EMAIL_LINKING as a JSON boolean so "false" does not enable dangerous account linking. --- src/env.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/env.ts b/src/env.ts index 516381af..37827335 100644 --- a/src/env.ts +++ b/src/env.ts @@ -139,7 +139,9 @@ export const env = createEnv({ OIDC_CLIENT_ID: process.env.OIDC_CLIENT_ID, OIDC_CLIENT_SECRET: process.env.OIDC_CLIENT_SECRET, OIDC_WELL_KNOWN_URL: process.env.OIDC_WELL_KNOWN_URL, - OIDC_ALLOW_DANGEROUS_EMAIL_LINKING: Boolean(process.env.OIDC_ALLOW_DANGEROUS_EMAIL_LINKING), + OIDC_ALLOW_DANGEROUS_EMAIL_LINKING: Boolean( + JSON.parse(process.env.OIDC_ALLOW_DANGEROUS_EMAIL_LINKING || 'false'), + ), UPLOAD_MAX_FILE_SIZE_MB: process.env.UPLOAD_MAX_FILE_SIZE_MB ? Number(process.env.UPLOAD_MAX_FILE_SIZE_MB) : 10, From 794049cf5de01c5a77070405e8b30d0f8f531a16 Mon Sep 17 00:00:00 2001 From: Josh Date: Sun, 2 Aug 2026 13:24:43 -0400 Subject: [PATCH 2/2] fix(env): default OIDC account linking flag to false --- src/env.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/env.ts b/src/env.ts index 37827335..913ed31c 100644 --- a/src/env.ts +++ b/src/env.ts @@ -70,7 +70,7 @@ export const env = createEnv({ OIDC_CLIENT_ID: z.string().optional(), OIDC_CLIENT_SECRET: z.string().optional(), OIDC_WELL_KNOWN_URL: z.string().optional(), - OIDC_ALLOW_DANGEROUS_EMAIL_LINKING: z.boolean().optional(), + OIDC_ALLOW_DANGEROUS_EMAIL_LINKING: z.boolean().default(false), UPLOAD_MAX_FILE_SIZE_MB: z.coerce.number().int().positive().default(10), },