misc: added session regenerate for fresh state

2026-09-22 13:39:35 +00:00 · 2024-06-18 15:35:18 +08:00
parent 8de4443be1
commit c5c00b520c
1 changed files with 4 additions and 1 deletions
--- a/backend/src/ee/routes/v1/oidc-router.ts
+++ b/backend/src/ee/routes/v1/oidc-router.ts
@@ -50,8 +50,11 @@ export const registerOidcRouter = async (server: FastifyZodProvider) => {
      })
    },
    handler: async (req, res) => {
-      // get params, save to session
      const { orgSlug, callbackPort } = req.query;
+
+      // ensure fresh session state per login attempt
+      await req.session.regenerate();
+
      req.session.set<any>("oidcOrgSlug", orgSlug);

      if (callbackPort) {