diff --git a/backend/src/ee/routes/v1/oidc-router.ts b/backend/src/ee/routes/v1/oidc-router.ts index 55d3be19d..36ad8a085 100644 --- a/backend/src/ee/routes/v1/oidc-router.ts +++ b/backend/src/ee/routes/v1/oidc-router.ts @@ -50,8 +50,11 @@ export const registerOidcRouter = async (server: FastifyZodProvider) => { }) }, handler: async (req, res) => { - // get params, save to session const { orgSlug, callbackPort } = req.query; + + // ensure fresh session state per login attempt + await req.session.regenerate(); + req.session.set("oidcOrgSlug", orgSlug); if (callbackPort) {