From d266f7e938d41a899f3efce8d90464849bd73507 Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Mon, 19 Apr 2021 21:42:43 +0100
Subject: [PATCH] oauth2_proxy: add patch for CVE-2021-21291

---
 pkgs/servers/oauth2_proxy/default.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/pkgs/servers/oauth2_proxy/default.nix b/pkgs/servers/oauth2_proxy/default.nix
index 4c506c9fd3a3..199d949c2289 100644
--- a/pkgs/servers/oauth2_proxy/default.nix
+++ b/pkgs/servers/oauth2_proxy/default.nix
@@ -1,4 +1,4 @@
-{ lib, buildGoModule, fetchFromGitHub }:
+{ lib, buildGoModule, fetchFromGitHub, fetchpatch }:
 
 buildGoModule rec {
   pname = "oauth2-proxy";
@@ -11,6 +11,14 @@ buildGoModule rec {
     rev = "v${version}";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2021-21291.patch";
+      url = "https://github.com/oauth2-proxy/oauth2-proxy/commit/780ae4f3c99b579cb2ea9845121caebb6192f725.patch";
+      sha256 = "066cr6ml69pinw3j9rspjy2h3dvqmf4bvmdxvalb1ws3z0xkn4ag";
+    })
+  ];
+
   vendorSha256 = "1hrk3h729kcc77fq44kiywmyzk5a78v7bm5d2yl76lfxxdcdric7";
 
   # Taken from https://github.com/oauth2-proxy/oauth2-proxy/blob/master/Makefile