From 9e6673d02ecf38b2981b740ea8addbdb16814371 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 15 Jan 2026 02:20:53 -0300
Subject: [PATCH] vault: default oidc claims type

---
 services/vault/scripts/vault_oidc_configure.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/vault/scripts/vault_oidc_configure.sh b/services/vault/scripts/vault_oidc_configure.sh
index d417af2..af74f60 100644
--- a/services/vault/scripts/vault_oidc_configure.sh
+++ b/services/vault/scripts/vault_oidc_configure.sh
@@ -46,7 +46,7 @@ redirect_uris="${VAULT_OIDC_REDIRECT_URIS:-https://secret.bstein.dev/ui/vault/au
 bound_audiences="${VAULT_OIDC_BOUND_AUDIENCES:-${VAULT_OIDC_CLIENT_ID}}"
 bound_claims_type="${VAULT_OIDC_BOUND_CLAIMS_TYPE:-string}"
 bound_claims_type="$(printf '%s' "${bound_claims_type}" | tr -d '[:space:]')"
-if [ -z "${bound_claims_type}" ]; then
+if [ -z "${bound_claims_type}" ] || [ "${bound_claims_type}" = "<novalue>" ]; then
   bound_claims_type="string"
 fi