From 67e952fbac731109300f65d76f306943d4fcf331 Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Mon, 14 Jul 2025 18:24:00 +0300
Subject: [PATCH 1/3] lasuite-meet: 0.1.27 -> 0.1.28

Diff: https://github.com/suitenumerique/meet/compare/refs/tags/v0.1.27...refs/tags/v0.1.28

Changelog: https://github.com/suitenumerique/meet/blob/v0.1.28/CHANGELOG.md
---
 pkgs/by-name/la/lasuite-meet/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/la/lasuite-meet/package.nix b/pkgs/by-name/la/lasuite-meet/package.nix
index a7cdc837ed96..d8d0468d7ac1 100644
--- a/pkgs/by-name/la/lasuite-meet/package.nix
+++ b/pkgs/by-name/la/lasuite-meet/package.nix
@@ -13,14 +13,14 @@ in
 
 python.pkgs.buildPythonApplication rec {
   pname = "lasuite-meet";
-  version = "0.1.27";
+  version = "0.1.28";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "suitenumerique";
     repo = "meet";
     tag = "v${version}";
-    hash = "sha256-EMhsQPrONaQmNJ/FFoYlP5KKXT8vm7LwUHmEZd0oZeE=";
+    hash = "sha256-zB27doGkWch3e1Lc0Q3TurQeplV7vOdzJ+G+MFZI3Og=";
   };
 
   sourceRoot = "source/src/backend";

From 4ab15e0809468fd9473b059eed4b751f6d59c2df Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Mon, 14 Jul 2025 18:27:00 +0300
Subject: [PATCH 2/3] lasuite-meet-frontend: 0.1.27 -> 0.1.28

Diff: https://github.com/suitenumerique/meet/compare/refs/tags/v0.1.27...refs/tags/v0.1.28

Changelog: https://github.com/suitenumerique/meet/blob/v0.1.28/CHANGELOG.md
---
 pkgs/by-name/la/lasuite-meet-frontend/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/la/lasuite-meet-frontend/package.nix b/pkgs/by-name/la/lasuite-meet-frontend/package.nix
index 62735ff11cee..f939cd296278 100644
--- a/pkgs/by-name/la/lasuite-meet-frontend/package.nix
+++ b/pkgs/by-name/la/lasuite-meet-frontend/package.nix
@@ -7,13 +7,13 @@
 
 buildNpmPackage rec {
   pname = "lasuite-meet-frontend";
-  version = "0.1.27";
+  version = "0.1.28";
 
   src = fetchFromGitHub {
     owner = "suitenumerique";
     repo = "meet";
     tag = "v${version}";
-    hash = "sha256-EMhsQPrONaQmNJ/FFoYlP5KKXT8vm7LwUHmEZd0oZeE=";
+    hash = "sha256-zB27doGkWch3e1Lc0Q3TurQeplV7vOdzJ+G+MFZI3Og=";
   };
 
   sourceRoot = "source/src/frontend";
@@ -21,7 +21,7 @@ buildNpmPackage rec {
   npmDeps = fetchNpmDeps {
     inherit version src;
     sourceRoot = "source/src/frontend";
-    hash = "sha256-7wXzcn6aGAkRUOCI6MU0AlPGngBWJtdbAfnZZDaMWec=";
+    hash = "sha256-ajN3mDIUn8uX+xc3zZmzsFWY8Y5ss9gVeV0s5kJV3fs=";
   };
 
   buildPhase = ''

From f3096232c9f76dbae269da536584c55a1c9594dd Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Mon, 14 Jul 2025 18:27:29 +0300
Subject: [PATCH 3/3] lasuite-meet: add PKCE option

---
 pkgs/by-name/la/lasuite-meet/package.nix |  2 ++
 pkgs/by-name/la/lasuite-meet/pkce.patch  | 20 ++++++++++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 pkgs/by-name/la/lasuite-meet/pkce.patch

diff --git a/pkgs/by-name/la/lasuite-meet/package.nix b/pkgs/by-name/la/lasuite-meet/package.nix
index d8d0468d7ac1..6df4b9622dbd 100644
--- a/pkgs/by-name/la/lasuite-meet/package.nix
+++ b/pkgs/by-name/la/lasuite-meet/package.nix
@@ -28,6 +28,8 @@ python.pkgs.buildPythonApplication rec {
   patches = [
     # Support configuration throught environment variables for SECURE_*
     ./secure_settings.patch
+    # Add PKCE option
+    ./pkce.patch
   ];
 
   build-system = with python.pkgs; [ setuptools ];
diff --git a/pkgs/by-name/la/lasuite-meet/pkce.patch b/pkgs/by-name/la/lasuite-meet/pkce.patch
new file mode 100644
index 000000000000..968a38eb3d7b
--- /dev/null
+++ b/pkgs/by-name/la/lasuite-meet/pkce.patch
@@ -0,0 +1,20 @@
+--- a/meet/settings.py
++++ b/meet/settings.py
+@@ -430,6 +430,17 @@ class Base(Configuration):
+     OIDC_RP_SCOPES = values.Value(
+         "openid email", environ_name="OIDC_RP_SCOPES", environ_prefix=None
+     )
++    OIDC_USE_PKCE = values.BooleanValue(
++        default=False, environ_name="OIDC_USE_PKCE", environ_prefix=None
++    )
++    OIDC_PKCE_CODE_CHALLENGE_METHOD = values.Value(
++        default="S256",
++        environ_name="OIDC_PKCE_CODE_CHALLENGE_METHOD",
++        environ_prefix=None,
++    )
++    OIDC_PKCE_CODE_VERIFIER_SIZE = values.IntegerValue(
++        default=64, environ_name="OIDC_PKCE_CODE_VERIFIER_SIZE", environ_prefix=None
++    )
+     LOGIN_REDIRECT_URL = values.Value(
+         None, environ_name="LOGIN_REDIRECT_URL", environ_prefix=None
+     )