From 8f935a24f025afb116e80f71fda5b784ff77e1d2 Mon Sep 17 00:00:00 2001 From: Leo Vasanko Date: Thu, 19 Feb 2026 01:00:13 +0000 Subject: [PATCH] Fix auth-host being added to origins even when no origins were wanted. --- paskia/__main__.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/paskia/__main__.py b/paskia/__main__.py index 7574121..de063ba 100644 --- a/paskia/__main__.py +++ b/paskia/__main__.py @@ -124,7 +124,8 @@ def main(): args.auth_host = f"https://{args.auth_host}" args.auth_host = args.auth_host.rstrip("/") validate_auth_host(args.auth_host, args.rp_id) - args.origins.insert(0, args.auth_host) # Ensure first in origins + if args.origins: + args.origins.insert(0, args.auth_host) # Ensure first in origins # Normalize, strip trailing slashes, and deduplicate while preserving order origins = list({normalize_origin(o).rstrip("/"): ... for o in (args.origins)})