Move version file, fix oidc, make jobs use envs

2025-12-01 15:59:26 +11:00
parent 3eddfe9f7e
commit 54d9c3a0d9
5 changed files with 125 additions and 6 deletions
--- a/app/controllers/oidc_auth_controller.rb
+++ b/app/controllers/oidc_auth_controller.rb
@@ -40,9 +40,13 @@ class OidcAuthController < ApplicationController

    # Add PKCE verifier if available
    code_verifier = retrieve_pkce_verifier
-    oidc_client.code_verifier = code_verifier if code_verifier.present?

-    access_token = oidc_client.access_token!
+    # Pass code_verifier as parameter to access_token! method (PKCE support)
+    access_token = if code_verifier.present?
+      oidc_client.access_token!(:body, code_verifier: code_verifier)
+    else
+      oidc_client.access_token!
+    end

    # Extract claims from ID token (JWT-only approach)
    id_token = access_token.id_token