From f938528ba61e484953c91af6008738494be41b14 Mon Sep 17 00:00:00 2001
From: ibizaman <ibizaman@tiserbox.com>
Date: Sat, 27 Sep 2025 22:35:08 +0200
Subject: [PATCH] open-webui: add missing authorization_policy

---
 modules/services/open-webui.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/services/open-webui.nix b/modules/services/open-webui.nix
index b724e03..9ca4aad 100644
--- a/modules/services/open-webui.nix
+++ b/modules/services/open-webui.nix
@@ -195,6 +195,7 @@ in
           client_id = cfg.sso.clientID;
           client_secret.source = cfg.sso.sharedSecretForAuthelia.result.path;
           scopes = [ "openid" "email" "profile" ];
+          authorization_policy = cfg.sso.authorization_policy;
           redirect_uris = [
             "https://${cfg.subdomain}.${cfg.domain}/oauth/oidc/callback"
           ];