AdmMabe/ai-chat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: update auth_callback to include client_id in POST body for OIDC providers

Browse Source
This commit is contained in:
Mabe
2026-06-21 17:03:43 +02:00
parent 6a7c225606
commit da0196b469
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/main.py
+3 -2
View File
@@ -78,21 +78,22 @@ async def auth_callback(payload: AuthCallbackRequest):
"code": payload.code, "code": payload.code,
"code_verifier": payload.code_verifier, "code_verifier": payload.code_verifier,
"redirect_uri": str(payload.redirect_uri), "redirect_uri": str(payload.redirect_uri),
"client_id": settings.oidc_client_id,
} }
# Some OIDC providers expect client credentials via HTTP Basic auth # Some OIDC providers expect client credentials via HTTP Basic auth
auth = None auth = None
if settings.oidc_client_secret: if settings.oidc_client_secret:
auth = (settings.oidc_client_id, settings.oidc_client_secret) auth = (settings.oidc_client_id, settings.oidc_client_secret)
else:
data["client_id"] = settings.oidc_client_id
async with httpx.AsyncClient(timeout=15.0) as client: async with httpx.AsyncClient(timeout=15.0) as client:
response = await client.post(token_endpoint, data=data, headers={"Accept": "application/json"}, auth=auth) response = await client.post(token_endpoint, data=data, headers={"Accept": "application/json"}, auth=auth)
# Some providers only accept client authentication via POST body # Some providers only accept client authentication via POST body
if response.status_code != 200 and auth is not None: if response.status_code != 200 and auth is not None:
# try falling back to client_secret in the request body
data_with_secret = dict(data) data_with_secret = dict(data)
data_with_secret["client_id"] = settings.oidc_client_id
data_with_secret["client_secret"] = settings.oidc_client_secret data_with_secret["client_secret"] = settings.oidc_client_secret
response = await client.post(token_endpoint, data=data_with_secret, headers={"Accept": "application/json"}) response = await client.post(token_endpoint, data=data_with_secret, headers={"Accept": "application/json"})