🔒️ Check pkce for oidc provider (#1678)

This commit is contained in:
Luke Vella 2025-04-21 16:46:52 +01:00 committed by GitHub
parent e78c39660d
commit 22f32f9314
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -19,7 +19,7 @@ export const OIDCProvider = () => {
clientId: process.env.OIDC_CLIENT_ID,
clientSecret: process.env.OIDC_CLIENT_SECRET,
idToken: true,
checks: ["state"],
checks: ["pkce", "state"],
allowDangerousEmailAccountLinking: true,
profile(profile) {
return {