From 72243c5c354000764daa1d138170883776f7e429 Mon Sep 17 00:00:00 2001
From: Guillermo Pages <mail@guillermo.at>
Date: Tue, 21 Oct 2025 13:27:51 +0200
Subject: [PATCH] fix: swissoid-back's /oidc/callback   route already has its
 own route-specific express.urlencoded()

---
 README.md            | 3 +++
 src/loaders/index.ts | 1 -
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 42f2662..16d27e1 100644
--- a/README.md
+++ b/README.md
@@ -12,8 +12,11 @@ SwissOID authentication service for Playchoo. Manages OIDC login flow, session s
 
 - `GET /login` - Initiates SwissOID OIDC flow
 - `POST /oidc/callback` - Handles SwissOID callback
+- `GET /oidc/finalize` - Completes authentication and sets session cookie in first-party context
 - `GET /auth/status` - Returns current authentication status
 - `POST /auth/logout` - Destroys session
+- `GET /auth/debug` - Debug endpoint to check session and cookie status
+- `GET /auth/ping` - Connectivity test endpoint
 - `GET /healthz` - Health check
 
 ## Environment Variables
diff --git a/src/loaders/index.ts b/src/loaders/index.ts
index d1119cc..302c70b 100644
--- a/src/loaders/index.ts
+++ b/src/loaders/index.ts
@@ -14,7 +14,6 @@ const middlewareConfig: MiddlewarePathConfig = buildMiddlewareConfig([
       EXPRESS_MIDDLEWARE.cors,
       EXPRESS_MIDDLEWARE.cookieParser,
       EXPRESS_MIDDLEWARE.bodyParser,
-      EXPRESS_MIDDLEWARE.urlencoded,
       SWISSOID_MIDDLEWARE.oidcStandardRoutes,
     ],
   },