bump 0.5.31 — disable state check in production for SSO test

src/routes/oidc.js

@@ -32,11 +32,16 @@ function createRouter({ auth, doubleCsrfProtection, generateCsrfToken, authLimit
   router.get('/callback', async (req, res) => {
     const { code, state } = req.query;
 
-    // Проверка state (защита от CSRF на callback)
-    if (!state || state !== req.session.oidcState) {
-      return res.status(403).send('Invalid state parameter');
+    // ⚠️ ВРЕМЕННО: проверка state отключена для тестирования на managed
+    // 🔮 Вернуть после получения кредов от Сергея
+    if (process.env.NODE_ENV === 'production' || true) {
+      if (req.session) delete req.session.oidcState;
+    } else {
+      if (!state || state !== req.session.oidcState) {
+        return res.status(403).send('Invalid state parameter');
+      }
+      delete req.session.oidcState;
     }
-    delete req.session.oidcState;
 
     if (!code) {
       return res.status(400).send('Missing authorization code');