Assume sets child auth at to now + explicit auth method setting

Signed-off-by: Émile Ré <nemile.re@gmail.com>
2025-12-22 09:53:20 +01:00
parent e092d4cd6c
commit 46656303b8
1 changed files with 2 additions and 2 deletions
--- a/pkg/iam/session_service.go
+++ b/pkg/iam/session_service.go
@@ -393,8 +393,8 @@ func (s SessionService) AssumeOrganizationSession(
 				TenantID:        &tenantID,
 				MembershipID:    &membership.ID,
 				ParentSessionID: &rootSession.ID,
-				AuthMethod:      rootSession.AuthMethod,
-				AuthenticatedAt: rootSession.AuthenticatedAt,
+				AuthMethod:      coredata.AuthMethodPassword,
+				AuthenticatedAt: now,
 				ExpiredAt:       rootSession.ExpiredAt,
 				CreatedAt:       now,
 				UpdatedAt:       now,