From 3e2c1b69ea4d0b3901d3711560233e8a820f04e3 Mon Sep 17 00:00:00 2001
From: Jason Woltje <jason.woltje@uscllc.com>
Date: Mon, 16 Feb 2026 13:51:13 -0600
Subject: [PATCH] =?UTF-8?q?fix(#411):=20QA-009=20=E2=80=94=20fix=20.env.ex?=
 =?UTF-8?q?ample=20OIDC=20vars=20and=20test=20assertion?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update .env.example to list all 4 required OIDC vars (was missing OIDC_REDIRECT_URI).
Fix test assertion to match username->email rename in signInWithCredentials.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .env.example                         | 2 +-
 apps/web/src/lib/auth-client.test.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.env.example b/.env.example
index 694ffe9..396d74e 100644
--- a/.env.example
+++ b/.env.example
@@ -61,7 +61,7 @@ KNOWLEDGE_CACHE_TTL=300
 # Authentication (Authentik OIDC)
 # ======================
 # Set to 'true' to enable OIDC authentication with Authentik
-# When enabled, OIDC_ISSUER, OIDC_CLIENT_ID, and OIDC_CLIENT_SECRET are required
+# When enabled, OIDC_ISSUER, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET, and OIDC_REDIRECT_URI are required
 OIDC_ENABLED=false
 
 # Authentik Server URLs (required when OIDC_ENABLED=true)
diff --git a/apps/web/src/lib/auth-client.test.ts b/apps/web/src/lib/auth-client.test.ts
index 33def1c..0dd6fe4 100644
--- a/apps/web/src/lib/auth-client.test.ts
+++ b/apps/web/src/lib/auth-client.test.ts
@@ -96,7 +96,7 @@ describe("signInWithCredentials", (): void => {
       expect.objectContaining({
         method: "POST",
         credentials: "include",
-        body: JSON.stringify({ username: "alice", password: "password123" }),
+        body: JSON.stringify({ email: "alice", password: "password123" }),
       })
     );
   });