From d48318ad6be922c8781fe53cf3c64bb15f7aaa26 Mon Sep 17 00:00:00 2001 From: Mabe Date: Sun, 21 Jun 2026 16:57:04 +0200 Subject: [PATCH] fix: update auth_callback to include client_id in request body for OIDC providers --- backend/app/main.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/backend/app/main.py b/backend/app/main.py index 0a67f3b..caeff73 100644 --- a/backend/app/main.py +++ b/backend/app/main.py @@ -78,15 +78,13 @@ async def auth_callback(payload: AuthCallbackRequest): "code": payload.code, "code_verifier": payload.code_verifier, "redirect_uri": str(payload.redirect_uri), + "client_id": settings.oidc_client_id, } # Some OIDC providers expect client credentials via HTTP Basic auth auth = None if settings.oidc_client_secret: auth = (settings.oidc_client_id, settings.oidc_client_secret) - else: - # public client: include client_id in the request body - data["client_id"] = settings.oidc_client_id async with httpx.AsyncClient(timeout=15.0) as client: response = await client.post(token_endpoint, data=data, headers={"Accept": "application/json"}, auth=auth)