From 1a4436220262929ad8c6c8ca398912fafd60b7a4 Mon Sep 17 00:00:00 2001 From: Josh Knapp Date: Tue, 11 Aug 2026 15:29:05 -0700 Subject: [PATCH] fix: pass OIDC_OFFLINE_ACCESS through to the app container MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The app service's environment block is an explicit allow-list, not env_file — as the comment two lines above this change says, a var added to .env but not listed here never reaches the container. PR #20 added OIDC_OFFLINE_ACCESS to .env.example and documented it in the README but missed this, so setting it in .env would have been silently ignored and the refresh-token fix would not have taken effect. Caught while deploying, before it could look like the IdP change had failed. The external-db override merges its environment block rather than replacing it, so it inherits this and needs no equivalent change. Co-Authored-By: Claude Opus 5 (1M context) --- docker-compose.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/docker-compose.yml b/docker-compose.yml index dd72ed0..c386846 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -117,6 +117,7 @@ services: # added to .env but not listed here never reaches the container. OIDC_ISSUER_MCP: ${OIDC_ISSUER_MCP:-} OIDC_AUDIENCE_SCOPE: ${OIDC_AUDIENCE_SCOPE:-} + OIDC_OFFLINE_ACCESS: ${OIDC_OFFLINE_ACCESS:-} PLUGIN_MARKETPLACE_URL: ${PLUGIN_MARKETPLACE_URL:-} PLUGIN_MARKETPLACE_NAME: ${PLUGIN_MARKETPLACE_NAME:-shared-memory} -- 2.52.0