coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Restore login compatibility with deployed Authelia 4.38

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
tegwick 2026-09-16 01:51:38 +02:00
parent 3f1c9ecd8a
commit cbea539d08
4 changed files with 14 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
informed_decision/oidc.py
View file

@ -78,8 +78,8 @@ class KeyCapeLogin:
return self.issuer + "/authorize?" + urlencode({
"response_type": "code", "client_id": CLIENT_ID, "redirect_uri": CALLBACK,
"scope": " ".join(REQUIRED_SCOPES), "state": state, "nonce": nonce,
# Review policy requires recent MFA; a reused SSO session may be older.
"prompt": "login", "max_age": "0",
# Authelia 4.38 cannot complete prompt=login/max_age=0.
# Review policy still enforces the signed MFA authentication age.
"code_challenge": challenge, "code_challenge_method": "S256",
}), browser