From 3173a87572a9e34b93dc2d2718d2b26dbbd3f779 Mon Sep 17 00:00:00 2001
From: "Gabriel Mowses (Mouse)" <gabriel.mowses@nees.ufal.br>
Date: Wed, 1 Apr 2026 21:47:41 -0300
Subject: [PATCH] fix: use correct 10-arg verify callback signature for
 passport-openidconnect

---
 server/modules/authentication/oidc/authentication.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/modules/authentication/oidc/authentication.js b/server/modules/authentication/oidc/authentication.js
index 390cfd4f..eaef82e2 100644
--- a/server/modules/authentication/oidc/authentication.js
+++ b/server/modules/authentication/oidc/authentication.js
@@ -23,7 +23,8 @@ module.exports = {
           store(req, ctx, appState, meta, cb) { cb(null, ctx.state || 'state') }
           verify(req, providedState, cb) { cb(null, true) }
         })()
-      }, async (req, iss, sub, profile, accessToken, refreshToken, params, cb) => {
+      }, async (req, iss, uiProfile, idProfile, context, idToken, accessToken, refreshToken, params, cb) => {
+        const profile = uiProfile || idProfile || {}
         try {
           // passport-openidconnect may not populate profile properly
           // Fetch user info manually using the access token