From 6ce5984c1e233a0b1acf4c174c8d4b10f4b65ea2 Mon Sep 17 00:00:00 2001
From: lilly
Date: Thu, 14 May 2026 17:51:56 +0200
Subject: [PATCH] api: fix OIDC not re-persisting token nonce
---
api/src/dooris_api/deps.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/api/src/dooris_api/deps.py b/api/src/dooris_api/deps.py
index fa86c1b..949fd13 100644
--- a/api/src/dooris_api/deps.py
+++ b/api/src/dooris_api/deps.py
@@ -44,7 +44,7 @@ async def get_current_user(
token_resp = oidc_client.exchange_refresh_token(req.cookies["refresh_token"])
if isinstance(token_resp, TokenSuccessResponse):
logger.debug("successfully got new tokens from refresh token")
- persist_auth_state(oidc_client, resp, token_resp, auth_start_time)
+ persist_auth_state(oidc_client, resp, token_resp, auth_start_time, req.cookies["auth_nonce"])
# return the newly gotten info
id_token = oidc_client.decode_id_token(token_resp.id_token)