oidc: some comments

2025-06-12 22:58:29 +02:00
parent b61b45177a
commit f0c5b603ee
2 changed files with 2 additions and 2 deletions
--- a/src/oidcserver.js
+++ b/src/oidcserver.js
@@ -457,7 +457,7 @@ async function interactionConfirm(req, res, next) {

    const user = await users.get(accountId);
    if (!user) return next(new Error('User not found'));
-    user.ghost = lastSubmission ? lastSubmission.ghost : false; // restore ghost flag
+    user.ghost = !!lastSubmission?.ghost; // restore ghost flag. lastSubmission can be empty if login interaction was skipped (already logged in)

    // Check if user has access to the app if client refers to an app
    if (client.appId) {