editoast: add acr_values for MFA

OpenRailAssociation · Jun 21, 2024 · 72b982b · 72b982b
1 parent bffd8c1
commit 72b982b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/gateway/actix_auth/src/providers/oidc.rs b/gateway/actix_auth/src/providers/oidc.rs
@@ -136,7 +136,8 @@ impl SessionProvider for OidcProvider {
                 CsrfToken::new_random,
                 Nonce::new_random,
             )
-            .add_scope(Scope::new(scope.to_owned()));
+            .add_scope(Scope::new(scope.to_owned()))
+            .add_extra_param("acr_values", "forte");
 
         let (auth_url, csrf_token, nonce) = client_builder.url();
         // if we ever decide to store the nonce unencrypted, we should also change how it's checked: