From f06852dd3b777b8bda9da6e5b9d77d380a6d2b72 Mon Sep 17 00:00:00 2001
From: Jeff Emmett <jeffemmett@gmail.com>
Date: Sun, 12 Apr 2026 11:54:24 -0400
Subject: [PATCH] fix(oidc): handle literal \n in PEM key from .env files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 src/encryptid/server.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/encryptid/server.ts b/src/encryptid/server.ts
index d9ef69b8..54d9af0b 100644
--- a/src/encryptid/server.ts
+++ b/src/encryptid/server.ts
@@ -6658,6 +6658,7 @@ async function initOidcKeys() {
     const pemBody = pemEnv
       .replace(/-----BEGIN PRIVATE KEY-----/, '')
       .replace(/-----END PRIVATE KEY-----/, '')
+      .replace(/\\n/g, '')   // literal \n from .env files
       .replace(/\s/g, '');
     const binaryDer = Uint8Array.from(atob(pemBody), c => c.charCodeAt(0));
     oidcPrivateKey = await crypto.subtle.importKey(