From c10cc931bee8a5fc8e664fd891ec2cf68fe3b857 Mon Sep 17 00:00:00 2001
From: Nikhil Sinha <nikhil.sinha@parseable.com>
Date: Tue, 30 Jun 2026 16:46:45 +0700
Subject: [PATCH] fix: oauth sync

current: user signs up using oauth, all queries fail with error -
session expired or no longer valid
reason: user is not synced with other nodes in the cluster

fix: sync user+roles with all live nodes
---
 src/handlers/http/oidc.rs | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/src/handlers/http/oidc.rs b/src/handlers/http/oidc.rs
index 51d1355cd..682e926d9 100644
--- a/src/handlers/http/oidc.rs
+++ b/src/handlers/http/oidc.rs
@@ -44,7 +44,7 @@ use url::Url;
 use crate::{
     handlers::{
         COOKIE_AGE_DAYS, SESSION_COOKIE_NAME, USER_COOKIE_NAME, USER_ID_COOKIE_NAME,
-        http::modal::OIDC_CLIENT,
+        http::{cluster::sync_user_creation, modal::OIDC_CLIENT},
     },
     oauth::OAuthSession,
     parseable::{DEFAULT_TENANT, PARSEABLE},
@@ -238,6 +238,21 @@ pub async fn reply_login(
         }
     };
 
+    if !PARSEABLE.options.is_multi_tenant() {
+        let roles = Some(user.roles.clone());
+        if let Err(e) = sync_user_creation(
+            &req,
+            user.clone(),
+            &roles,
+            &tenant_id,
+            &PARSEABLE.options.username,
+        )
+        .await
+        {
+            tracing::error!("Failed to sync OAuth user with roles to cluster nodes: {e}");
+        }
+    }
+
     let id = Ulid::new();
     Users.new_session(&user, SessionKey::SessionId(id), expires_in);