{ pkgs, ... }:
# AUTO-UPDATE: nix-update --flake oidcwarden
# FIXME: https://github.com/dani-garcia/vaultwarden/pull/3899
pkgs.rustPlatform.buildRustPackage (finalAttrs: {
  pname = "oidcwarden";
  version = "2025.6.1-3";

  src = pkgs.fetchFromGitHub {
    owner = "Timshel";
    repo = "OIDCWarden";
    rev = "v${finalAttrs.version}";
    hash = "sha256-I4zOWIU8iBQeLMMQSVcKc3w+WodiZ6MDYnKR7H/+v0Y=";
  };

  cargoHash = "sha256-fMePvMnefdcN90Y3BPqcKNXyg7tUd64IOUnOQis/qTU=";

  env.VW_VERSION = finalAttrs.version;

  nativeBuildInputs = with pkgs; [ pkg-config ];
  buildInputs = with pkgs; [
    openssl
    libpq
  ];

  buildFeatures = [ "postgresql" ];

  passthru = with pkgs.vaultwarden; {
    inherit webvault updateScript;
    tests = pkgs.nixosTests.vaultwarden;
  };

  meta.mainProgram = "oidcwarden";
})