coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Require fresh KeyCape authentication for decision review sign-in

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
tegwick 2026-09-16 01:35:02 +02:00
parent c70d63abf9
commit 3f1c9ecd8a
6 changed files with 23 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
informed_decision/oidc.py
View file

@ -78,6 +78,8 @@ class KeyCapeLogin:
return self.issuer + "/authorize?" + urlencode({
"response_type": "code", "client_id": CLIENT_ID, "redirect_uri": CALLBACK,
"scope": " ".join(REQUIRED_SCOPES), "state": state, "nonce": nonce,
# Review policy requires recent MFA; a reused SSO session may be older.
"prompt": "login", "max_age": "0",
"code_challenge": challenge, "code_challenge_method": "S256",
}), browser