fix(auth): corrections runtime LinkedIn OAuth (#88)

- Workaround nonce OIDC LinkedIn (non-conformité) : capture MissingClaimError après échange de code réussi et fetch userinfo séparément
- Ajout token_endpoint_auth_method: client_secret_post (requis par LinkedIn)
- suppress_callback_exceptions=True pour corriger les erreurs Dash multi-pages
- Suppression bouton déconnexion redondant sur /compte/admin et style hover incorrect sur la navbar

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Colin Maudry
2026-06-25 00:38:01 +02:00
parent 5a702ac77e
commit 590b927e31
9 changed files with 48 additions and 9 deletions
+4 -1
View File
@@ -17,5 +17,8 @@ def init_oauth(app: Flask) -> None:
client_id=os.getenv("LINKEDIN_CLIENT_ID"),
client_secret=os.getenv("LINKEDIN_CLIENT_SECRET"),
server_metadata_url=LINKEDIN_DISCOVERY_URL,
client_kwargs={"scope": "openid profile email"},
client_kwargs={
"scope": "openid profile email",
"token_endpoint_auth_method": "client_secret_post",
},
)