mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-23 04:06:21 +00:00
b3ae6f72b6
A provider that issues no refresh token (offline_access not requested, e.g. default Authelia) left session.OIDCIssuer unset, so /api/security/status reported an empty ssoSessionUsername and X-Auth-Method fell back to plain session. The frontend then skipped the SSO fast path, and the pre-auth bootstrap short-circuit pinned the user to the login page after ?oidc=success before the /api/state probe could run (issue #1574). Stamp issuer/client on every OIDC session (refresh stays gated on the token being present) and let a completed SSO callback bypass the bootstrap short-circuit.