coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Request fresh KeyCape login for timed reviews with narrow image candidate

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029c-c003-7283-acc9-930b434e6cae
This commit is contained in:
tegwick 2026-10-03 20:33:34 +02:00
parent 219d83ad1b
commit 2d2161bc64
7 changed files with 83 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
informed_decision/oidc.py
View file

@ -78,8 +78,10 @@ class KeyCapeLogin:
return self.issuer + "/authorize?" + urlencode({
"response_type": "code", "client_id": CLIENT_ID, "redirect_uri": CALLBACK,
"scope": " ".join(REQUIRED_SCOPES), "state": state, "nonce": nonce,
# Authelia 4.38 cannot complete prompt=login/max_age=0.
# Review policy still enforces the signed MFA authentication age.
# KeyCape enforces freshness itself and translates the upstream
# request for Authelia 4.38 (KEY-WP-0033). Prevent a reused issuer
# session from carrying stale MFA into a new review login.
"prompt": "login", "max_age": "0",
"code_challenge": challenge, "code_challenge_method": "S256",
}), browser