From 22f32f9314b7881ac8ff20d3eba463c3f664a85d Mon Sep 17 00:00:00 2001
From: Luke Vella <me@lukevella.com>
Date: Mon, 21 Apr 2025 16:46:52 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F=20Check=20pkce=20for=20oi?=
 =?UTF-8?q?dc=20provider=20(#1678)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/web/src/auth/providers/oidc.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/src/auth/providers/oidc.ts b/apps/web/src/auth/providers/oidc.ts
index c7732e896..c22795291 100644
--- a/apps/web/src/auth/providers/oidc.ts
+++ b/apps/web/src/auth/providers/oidc.ts
@@ -19,7 +19,7 @@ export const OIDCProvider = () => {
       clientId: process.env.OIDC_CLIENT_ID,
       clientSecret: process.env.OIDC_CLIENT_SECRET,
       idToken: true,
-      checks: ["state"],
+      checks: ["pkce", "state"],
       allowDangerousEmailAccountLinking: true,
       profile(profile) {
         return {