From 13216dc537d6e529d1c6f60fe8aef4dca9ffecb0 Mon Sep 17 00:00:00 2001
From: Thomas DELORGE <thomas.delorge@orbeet.io>
Date: Tue, 8 Sep 2026 18:00:31 +0200
Subject: [PATCH] fix: reload auth strategies when site URL changes

Callback URLs for OAuth/OIDC providers are baked in at strategy
activation. Changing host now reloads them so a restart is not required.
---
 server/graph/resolvers/site.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/server/graph/resolvers/site.js b/server/graph/resolvers/site.js
index 27cd340c1..44db78c50 100644
--- a/server/graph/resolvers/site.js
+++ b/server/graph/resolvers/site.js
@@ -41,6 +41,7 @@ module.exports = {
   SiteMutation: {
     async updateConfig(obj, args, context) {
       try {
+        const previousHost = WIKI.config.host
         if (args.hasOwnProperty('host')) {
           let siteHost = _.trim(args.host)
           if (siteHost.endsWith('/')) {
@@ -133,6 +134,11 @@ module.exports = {
           WIKI.app.disable('trust proxy')
         }
 
+        if (WIKI.config.host !== previousHost) {
+          await WIKI.auth.activateStrategies()
+          WIKI.events.outbound.emit('reloadAuthStrategies')
+        }
+
         return {
           responseResult: graphHelper.generateSuccess('Site configuration updated successfully')
         }