From 28a4d093ebcd6020a06a6d300b86cfdf8a2edd1d Mon Sep 17 00:00:00 2001 From: Lorenzo Corallo Date: Sat, 24 Oct 2026 17:17:10 +0200 Subject: [PATCH] fix(flux-web): request offline_access so sessions refresh --- infrastructure/flux-web/external-secret.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/infrastructure/flux-web/external-secret.yaml b/infrastructure/flux-web/external-secret.yaml index e5440af..7f74f62 100644 --- a/infrastructure/flux-web/external-secret.yaml +++ b/infrastructure/flux-web/external-secret.yaml @@ -27,7 +27,9 @@ spec: issuerURL: https://auth.polinetwork.org/api/auth clientID: "{{ .clientID }}" clientSecret: "{{ .clientSecret }}" - scopes: [openid, profile, email, "polinetwork:identity"] + # offline_access gets a refresh token; without it the session ends + # when the 5-minute ID token expires. + scopes: [openid, offline_access, profile, email, "polinetwork:identity"] autoLogin: true variables: # PoliNetwork permissions (flux:access, ...) from the