diff --git a/packages/database-interface/oauth.ts b/packages/database-interface/oauth.ts index 5a681c55..52d3272b 100644 --- a/packages/database-interface/oauth.ts +++ b/packages/database-interface/oauth.ts @@ -150,7 +150,7 @@ export class OAuthManager { const { flow, userInfo } = oidcFlowData; // Check if userId is equal to application.clientId - if ((flow.application?.clientId ?? "") !== userId) { + if (!flow.application?.clientId.startsWith(userId)) { return response(null, 302, { Location: `${config.http.base_url}${ config.frontend.routes.home diff --git a/server/api/oauth/sso/index.ts b/server/api/oauth/sso/index.ts index d79d4256..fa10b3ef 100644 --- a/server/api/oauth/sso/index.ts +++ b/server/api/oauth/sso/index.ts @@ -30,6 +30,9 @@ export const schemas = { query: z.object({ issuer: z.string(), client_id: z.string().optional(), + redirect_uri: z.string().url().optional(), + scope: z.string().optional(), + response_type: z.enum(["code"]).optional(), }), };