From c5c00b520c7378887fa0111b5cbb8da57d6fe226 Mon Sep 17 00:00:00 2001
From: Sheen Capadngan <sheensantoscapadngan@gmail.com>
Date: Tue, 18 Jun 2024 15:35:18 +0800
Subject: [PATCH] misc: added session regenerate for fresh state

---
 backend/src/ee/routes/v1/oidc-router.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/backend/src/ee/routes/v1/oidc-router.ts b/backend/src/ee/routes/v1/oidc-router.ts
index 55d3be19d..36ad8a085 100644
--- a/backend/src/ee/routes/v1/oidc-router.ts
+++ b/backend/src/ee/routes/v1/oidc-router.ts
@@ -50,8 +50,11 @@ export const registerOidcRouter = async (server: FastifyZodProvider) => {
       })
     },
     handler: async (req, res) => {
-      // get params, save to session
       const { orgSlug, callbackPort } = req.query;
+
+      // ensure fresh session state per login attempt
+      await req.session.regenerate();
+
       req.session.set<any>("oidcOrgSlug", orgSlug);
 
       if (callbackPort) {