From c8ac5710cf14c439afe874adf39bbcb913d0344f Mon Sep 17 00:00:00 2001
From: Sean O'Connor <sean@soconnor.dev>
Date: Wed, 14 Jan 2026 02:59:52 -0500
Subject: [PATCH] fix: add trusted origins

---
 src/lib/auth.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/lib/auth.ts b/src/lib/auth.ts
index b313e8b..cb880f9 100644
--- a/src/lib/auth.ts
+++ b/src/lib/auth.ts
@@ -15,7 +15,10 @@ export const auth = betterAuth({
             verification: schema.verificationTokens,
         },
     }),
-    trustedOrigins: ["https://beenvoice.soconnor.dev"],
+    trustedOrigins: [
+        "https://beenvoice.soconnor.dev",
+        "https://auth.soconnor.dev", // Authentik IdP for OIDC discovery
+    ],
     emailAndPassword: {
         enabled: true,
         password: {
@@ -46,7 +49,6 @@ export const auth = betterAuth({
                                 clientId: process.env.AUTHENTIK_CLIENT_ID,
                                 clientSecret: process.env.AUTHENTIK_CLIENT_SECRET,
                                 discoveryEndpoint: `${process.env.AUTHENTIK_ISSUER}/.well-known/openid-configuration`,
-                                jwksUri: `${process.env.AUTHENTIK_ISSUER}/jwks/`,
                                 pkce: true,
                             },
                         },