From eddd55bc5dcfe36d8a56645d4b7e2e49429a933c Mon Sep 17 00:00:00 2001
From: Leonardo Bishop <me@leonardobishop.net>
Date: Fri, 16 Jan 2026 18:45:03 +0000
Subject: Cache /userinfo for a bit

---
 pkg/auth/oidc.go | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'pkg/auth/oidc.go')

diff --git a/pkg/auth/oidc.go b/pkg/auth/oidc.go
index 674332e..e8afdd3 100644
--- a/pkg/auth/oidc.go
+++ b/pkg/auth/oidc.go
@@ -137,9 +137,16 @@ func (p *OIDCAuthProvider) CompleteJourney(ctx context.Context, authCode string,
 }
 
 func (p *OIDCAuthProvider) UpdateUserInfo(ctx context.Context, session *session.UserSession) error {
+	session.UserInfoMutex.Lock()
+	defer session.UserInfoMutex.Unlock()
+
+	if session.TeamID != "" && session.TeamName != "" && session.UserInfoExpires.Unix() > time.Now().Unix() {
+		return nil
+	}
+
 	userInfo, err := p.oidcProvider.UserInfo(ctx, session.OAuthTokenSource)
 	if err != nil {
-		return ErrInvalidToken
+		return err
 	}
 
 	var claims struct {
@@ -157,6 +164,7 @@ func (p *OIDCAuthProvider) UpdateUserInfo(ctx context.Context, session *session.
 	session.Name = claims.Name
 	session.TeamID = claims.TeamID
 	session.TeamName = claims.TeamName
+	session.UserInfoExpires = time.Now().Add(1 * time.Minute)
 
 	return nil
 }
-- 
cgit v1.2.3-70-g09d2