From afc439e2456760a028cf29e13045cf998e1a369f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Madis=20M=C3=A4gi?= Date: Sun, 13 Jul 2025 21:36:36 +0300 Subject: [PATCH] Handle sessions without refresh token --- inventory-app/oidc.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/inventory-app/oidc.py b/inventory-app/oidc.py index 17106b2..7b799b6 100644 --- a/inventory-app/oidc.py +++ b/inventory-app/oidc.py @@ -71,6 +71,9 @@ def login_callback(): return redirect(session.pop("original_url", "/")) def do_refresh(): + if "refresh_token" not in session: + print("no refresh token, skipping refresh") + return False print("doing refreesh") r = requests.post(metadata["token_endpoint"], { "client_secret": os.getenv("OIDC_CLIENT_SECRET"),