fix pkce

src/lib/server/auth.ts

@@ -320,12 +320,14 @@ export async function getOIDCUserData(
 	url: URL
 ): Promise<OIDCUserInfo> {
 	const client = await getOIDCClient(settings, url);
-	logger.info({ codeVerifier, code, url }, "codeVerifier");
-	const token = await client.callback(settings.redirectURI, {
-		code,
-		iss,
-		checks: { code_verifier: codeVerifier },
-	});
+	const token = await client.callback(
+		settings.redirectURI,
+		{
+			code,
+			iss,
+		},
+		{ code_verifier: codeVerifier }
+	);
 	const userData = await client.userinfo(token);
 
 	return { token, userData };

src/routes/.well-known/oauth-cimd/+server.ts

@@ -19,11 +19,7 @@ export const GET = ({ url }) => {
 			client_id: new URL(url, config.PUBLIC_ORIGIN || url.origin).toString(),
 			client_name: config.PUBLIC_APP_NAME,
 			client_uri: `${config.PUBLIC_ORIGIN || url.origin}${base}`,
-			redirect_uris: [
-				new URL("/login/callback", config.PUBLIC_ORIGIN || url.origin).toString(),
-				// todo: remove this
-				`http://localhost:5173/login/callback`,
-			],
+			redirect_uris: [new URL("/login/callback", config.PUBLIC_ORIGIN || url.origin).toString()],
 			token_endpoint_auth_method: "none",
 			scopes: OIDConfig.SCOPES,
 		}),