From 8f033a60475819a3dd52d9666ee67e9a16cc80a3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?dni=20=E2=9A=A1?= Date: Wed, 20 May 2026 09:27:02 +0200 Subject: [PATCH] fix: OIDC SSO login issues. closes #3970 (#3979) --- lnbits/core/views/auth_api.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/lnbits/core/views/auth_api.py b/lnbits/core/views/auth_api.py index 38d391cd4..3d3ad25e2 100644 --- a/lnbits/core/views/auth_api.py +++ b/lnbits/core/views/auth_api.py @@ -348,7 +348,11 @@ async def handle_oauth_token(request: Request, provider: str) -> RedirectRespons userinfo = await provider_sso.verify_and_process(request) if not userinfo: raise HTTPException(HTTPStatus.UNAUTHORIZED, "Invalid user info.") - user_id = decrypt_internal_message(provider_sso.state) + if provider_sso.state is None or provider_sso.state == "null": + user_id = None + else: + user_id = decrypt_internal_message(provider_sso.state) + request.session.pop("user", None) return await _handle_sso_login(userinfo, user_id)