[Bug]: OIDC token refresh flow is broken

[dareste]

Version

edge

What Kubernetes platforms are you running on?

Other

Steps to reproduce

There is a bug in the underlying njs logic that manages the OIDC flows. As a result, the refresh token flow is not working as expected.

This causes existing sessions not getting the updated tokens, which results in broken session continuity and users being forced to re-authenticate.

There's a PR in the NGINX OpenID reference implementation — the upstream for NIC's OIDC logic — that resolves the issue. NIC should include it in future releases: nginxinc/nginx-openid-connect#120.

[github-actions]

Hi @dareste thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!