From c9fb9c4a67449c1f63c142f154e03d1a7054757a Mon Sep 17 00:00:00 2001
From: "CMF\\e-leite" <EduardoLeite@criticalmanufacturing.com>
Date: Tue, 24 Mar 2026 15:09:00 +0000
Subject: [PATCH] Strategy fix

---
 api/strategies/openidStrategy.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/api/strategies/openidStrategy.js b/api/strategies/openidStrategy.js
index 49ed2cb8eb..ea925da3ac 100644
--- a/api/strategies/openidStrategy.js
+++ b/api/strategies/openidStrategy.js
@@ -786,7 +786,9 @@ async function setupOpenId() {
 
     if (clientSecret) {
       clientMetadata.client_secret = clientSecret;
-      clientMetadata.token_endpoint_auth_method = 'client_secret_post';
+      if (shouldGenerateNonce) {
+        clientMetadata.token_endpoint_auth_method = 'client_secret_post';
+      }
     } else if (usePKCE) {
       clientMetadata.token_endpoint_auth_method = 'none';
     }