From 7cf59a62a921e630572d4f4159e65c0be203ec83 Mon Sep 17 00:00:00 2001
From: Simon <3088413+chippey5@users.noreply.github.com>
Date: Wed, 20 May 2026 14:32:37 +0200
Subject: [PATCH] Add IDP_DOMAIN to the frame-src section in csp.yaml

When using an external IDP, not having the IDP FQDN in frame-src causes silent refreshes to get blocked.
---
 config/opencloud/csp.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/opencloud/csp.yaml b/config/opencloud/csp.yaml
index 22b9eb1a..d6b2ae7f 100644
--- a/config/opencloud/csp.yaml
+++ b/config/opencloud/csp.yaml
@@ -24,6 +24,7 @@ directives:
     - 'https://${COLLABORA_DOMAIN|collabora.opencloud.test}${TRAEFIK_PORT_HTTPS}/'
     # This is needed for the external-sites web extension when embedding sites
     - 'https://docs.opencloud.eu'
+    - 'https://${IDP_DOMAIN|keycloak.opencloud.test}${TRAEFIK_PORT_HTTPS}/'
   img-src:
     - '''self'''
     - 'data:'