From b3b32980dbc6c46d2f078df79998e7265bc7f0de Mon Sep 17 00:00:00 2001
From: KernelDeimos <7225168+KernelDeimos@users.noreply.github.com>
Date: Thu, 19 Feb 2026 16:32:41 -0500
Subject: [PATCH] clean(oidc): remove jwt remap in ESM code

---
 src/backend/src/services/auth/OIDCService.js | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/backend/src/services/auth/OIDCService.js b/src/backend/src/services/auth/OIDCService.js
index 28d5dee60..c903deba0 100644
--- a/src/backend/src/services/auth/OIDCService.js
+++ b/src/backend/src/services/auth/OIDCService.js
@@ -44,10 +44,6 @@ async function generate_random_username () {
  * Uses config.oidc.providers only; no environment variables.
  */
 export class OIDCService extends BaseService {
-    static MODULES = {
-        jwt,
-    };
-
     #googleDiscovery;
 
     async _init () {
@@ -135,14 +131,14 @@ export class OIDCService extends BaseService {
      * Sign state payload for CSRF protection (short-lived JWT).
      */
     signState (payload) {
-        return this.modules.jwt.sign(payload,
+        return jwt.sign(payload,
                         this.global_config.jwt_secret,
                         { expiresIn: STATE_EXPIRY_SEC });
     }
 
     verifyState (token) {
         try {
-            return this.modules.jwt.verify(token, this.global_config.jwt_secret);
+            return jwt.verify(token, this.global_config.jwt_secret);
         } catch ( e ) {
             return null;
         }