misc: added session regenerate for fresh state

This commit is contained in:
Sheen Capadngan
2024-06-18 15:35:18 +08:00
parent 8de4443be1
commit c5c00b520c
+4 -1
View File
@@ -50,8 +50,11 @@ export const registerOidcRouter = async (server: FastifyZodProvider) => {
}) })
}, },
handler: async (req, res) => { handler: async (req, res) => {
// get params, save to session
const { orgSlug, callbackPort } = req.query; const { orgSlug, callbackPort } = req.query;
// ensure fresh session state per login attempt
await req.session.regenerate();
req.session.set<any>("oidcOrgSlug", orgSlug); req.session.set<any>("oidcOrgSlug", orgSlug);
if (callbackPort) { if (callbackPort) {