periodically verify oidc refreshtokenHEADmaster

1 files changed, 3 insertions, 0 deletions

diff --git a/login.php b/login.php
index 96375d7..36d1890 100644
--- a/login.php
+++ b/login.php
@@ -71,6 +71,9 @@
 
 					session_regenerate_id(true);
 
+					$_SESSION["refresh_token"] = $oidc->getRefreshToken();
+					$_SESSION["refresh_token_last_check"] = time();
+
 					$_SESSION["owner"] = $username;
 					$_SESSION["pass_hash"] = sha1($user->pass);
 					$_SESSION["csrf_token"] = bin2hex(random_bytes(16));