From ba0bb62fa386c2bf91700ed1632587dfe944e609 Mon Sep 17 00:00:00 2001
From: Johannes Zellner <johannes@cloudron.io>
Date: Wed, 18 Mar 2026 14:37:15 +0100
Subject: [PATCH] hardcode CLI name for cid-cli in device auth flow

---
 src/oidcserver.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/oidcserver.js b/src/oidcserver.js
index 77e76083b..40867d90e 100644
--- a/src/oidcserver.js
+++ b/src/oidcserver.js
@@ -742,9 +742,14 @@ async function start() {
                     });
                 },
                 userCodeConfirmSource: async function (ctx, form, client, deviceInfo, userCode) {
+                    let clientName = ctx.oidc.client.clientName || ctx.oidc.client.clientId;
+
+                    // only special case the cli to avoid dumping the internal cid
+                    if (clientName === oidcClients.ID_CLI) clientName = 'CLI';
+
                     ctx.body = ejs.render(TEMPLATE_DEVICE_CONFIRM, {
                         name: await branding.getCloudronName(),
-                        clientName: ctx.oidc.client.clientName || ctx.oidc.client.clientId,
+                        clientName,
                         userCode,
                         form
                     });