From 119769a935b06baad3dfc4ddf831041a3fe2fdd7 Mon Sep 17 00:00:00 2001
From: p4u1 <p4u1_f4u1@riseup.net>
Date: Wed, 19 Aug 2026 14:01:33 +0200
Subject: [PATCH] feat: add enable_rauthy_sso command

---
 abra.sh | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/abra.sh b/abra.sh
index 1b8daeb..58ca2dd 100644
--- a/abra.sh
+++ b/abra.sh
@@ -38,6 +38,23 @@ enable_authentik_sso() {
   abra app cmd -T $DOMAIN zammad-railsserver rails_run "$(printf "%q " $COMMAND)"
 }
 
+enable_rauthy_sso() {
+  COMMAND="
+    (u = User.find_by(id: 3)) && (u.login='$OID_ADMIN_UID') && u.save!;
+    Setting.set('auth_openid_connect', true);
+    Setting.set('auth_third_party_auto_link_at_inital_login', true);
+    Setting.set('auth_openid_connect_credentials', {
+        'display_name'=>'$ORGANIZATION',
+        'identifier'=>'$OID_SSO_IDENTIFIER',
+        'issuer'=>'$OID_SSO_ISSUER',
+        'uid_field'=>'$OID_SSO_UID_FIELD',
+        'scope'=>'$OID_SSO_SCOPES',
+        'pkce'=>'$OID_SSO_PKCE',
+        'callback_url'=>'$OID_SSO_CALLBACK_URL'})
+    "
+  abra app cmd -T $DOMAIN app rails_run "$(printf "%q " $COMMAND)"
+}
+
 set_logo() {
   LOGO_PATH="$1"
   abra app cp "$APP_NAME" "$LOGO_PATH" zammad-railsserver:/tmp/
-- 
2.54.0