From c0a218cea07b34f49001d003e4507ed065321c66 Mon Sep 17 00:00:00 2001
From: Amit Kumar <aktech@users.noreply.github.com>
Date: Thu, 5 Feb 2026 12:19:44 +0000
Subject: [PATCH] Add redirectURI and scopes to NebariApp auth config

---
 templates/nebariapp.yaml | 5 +++++
 values.yaml              | 6 ++++++
 2 files changed, 11 insertions(+)

diff --git a/templates/nebariapp.yaml b/templates/nebariapp.yaml
index 29317aa..56b50ab 100644
--- a/templates/nebariapp.yaml
+++ b/templates/nebariapp.yaml
@@ -20,5 +20,10 @@ spec:
     enabled: {{ .enabled | default true }}
     provider: {{ .provider | default "keycloak" }}
     provisionClient: {{ .provisionClient | default true }}
+    redirectURI: {{ .redirectURI | default "/hub/oauth_callback" }}
+    {{- with .scopes }}
+    scopes:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
   {{- end }}
 {{- end }}
diff --git a/values.yaml b/values.yaml
index 4d21d64..36cf771 100644
--- a/values.yaml
+++ b/values.yaml
@@ -21,6 +21,12 @@ nebariapp:
     enabled: true
     provider: keycloak
     provisionClient: true
+    redirectURI: /hub/oauth_callback  # JupyterHub's OAuth callback
+    scopes:
+      - openid
+      - profile
+      - email
+      - groups
 
 # Shared storage configuration (disabled - requires RWX storage class)
 sharedStorage: