server: build OIDC client at startup; sweep oidc_state on alert tick

2026-05-05 13:45:52 +01:00
parent fce7245a51
commit e0989e1cef
2 changed files with 16 additions and 0 deletions
@@ -193,6 +193,9 @@ func (e *Engine) tick(ctx context.Context, now time.Time) {
 	if _, err := e.store.CleanupExpiredSetupTokens(ctx, now); err != nil {
 		slog.Warn("alert: cleanup expired setup tokens", "err", err)
 	}
+	if _, err := e.store.CleanupExpiredOIDCState(ctx, now.Add(-5*time.Minute)); err != nil {
+		slog.Warn("alert: cleanup expired oidc state", "err", err)
+	}

 	hosts, err := e.store.ListHosts(ctx)
 	if err != nil {