Function handleSave

public/js/adminPanel.js:9700–9891

()

}

function handleSave() {
  const enableFormLogin = !!document.getElementById("enableFormLogin")?.checked;
  const enableBasicAuth = !!document.getElementById("enableBasicAuth")?.checked;
  const enableOIDCLogin = !!document.getElementById("enableOIDCLogin")?.checked;
  const proxyOnlyEnabled = !!document.getElementById("authBypass")?.checked;
  const oidcPublicClient = !!document.getElementById("oidcPublicClient")?.checked;

  const authHeaderName =
    (document.getElementById("authHeaderName")?.value || "").trim() ||
    "X-Remote-User";

  const payload = {
    header_title: document.getElementById("headerTitle")?.value || "",
    publishedUrl: (() => {
      const el = document.getElementById("publishedUrl");
      if (!el) return "";
      if (el.dataset.locked === "1") return el.value || "";
      return (el.value || "").trim();
    })(),
    ffmpegPath: (() => {
      const el = document.getElementById("ffmpegPath");
      if (!el) return "";
      if (el.dataset.locked === "1") return el.value || "";
      return (el.value || "").trim();
    })(),
    ignoreRegex: (document.getElementById("ignoreRegex")?.value || "").trim(),
    loginOptions: {
      // Backend still expects “disable*” flags:
      disableFormLogin: !enableFormLogin,
      disableBasicAuth: !enableBasicAuth,
      disableOIDCLogin: !enableOIDCLogin,
      authBypass: proxyOnlyEnabled,
      authHeaderName,
    },
    enableWebDAV: !!document.getElementById("enableWebDAV")?.checked,
    safeUploadPolicy: (document.getElementById("safeUploadPolicy")?.value || "strict").trim(),
    sharedMaxUploadSize: parseInt(
      document.getElementById("sharedMaxUploadSize").value || "0",
      10
    ) || 0,
    oidc: {
      providerUrl: document.getElementById("oidcProviderUrl").value.trim(),
      redirectUri: document
        .getElementById("oidcRedirectUri")
        .value.trim(),
      debugLogging: !!document.getElementById("oidcDebugLogging")?.checked,
      allowDemote: !!document.getElementById("oidcAllowDemote")?.checked,
      publicClient: oidcPublicClient,
      groupClaim: (document.getElementById("oidcGroupClaim")?.value || "").trim(),
      extraScopes: (document.getElementById("oidcExtraScopes")?.value || "").trim(),
      // clientId/clientSecret added conditionally below
    },
    globalOtpauthUrl: document
      .getElementById("globalOtpauthUrl")
      .value.trim(),
    branding: {
      customLogoUrl: (document.getElementById("brandingCustomLogoUrl")?.value || "").trim(),
      headerBgLight: (document.getElementById("brandingHeaderBgLight")?.value || "").trim(),