Merge pull request #4826 from Infisical/saml-mfa-patch

only set JID token for non-saml SSO
This commit is contained in:
Andre
2025-11-06 23:28:40 -05:00
committed by GitHub
+8 -6
View File
@@ -550,12 +550,14 @@ export const registerSsoRouter = async (server: FastifyZodProvider) => {
providerAuthToken: req.body.providerAuthToken providerAuthToken: req.body.providerAuthToken
}); });
void res.setCookie("jid", data.token.refresh, { if ([AuthMethod.GOOGLE, AuthMethod.GITHUB, AuthMethod.GITLAB].includes(data.decodedProviderToken.authMethod)) {
httpOnly: true, void res.setCookie("jid", data.token.refresh, {
path: "/", httpOnly: true,
sameSite: "strict", path: "/",
secure: appCfg.HTTPS_ENABLED sameSite: "strict",
}); secure: appCfg.HTTPS_ENABLED
});
}
addAuthOriginDomainCookie(res); addAuthOriginDomainCookie(res);