From 34d5c9535d3a9c4f029088cf2a4db905bd3ab2ab Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Fri, 10 Jul 2026 03:22:28 +0200
Subject: [PATCH] =?UTF-8?q?=E2=99=BB=EF=B8=8F=20delete=20last=20used=20IDP?=
 =?UTF-8?q?=20coookie=20when=20logging=20in=20with=20email/password=20on?=
 =?UTF-8?q?=20smart=20login=20form?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/LoginPasswordForm.tsx | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/components/LoginPasswordForm.tsx b/src/components/LoginPasswordForm.tsx
index d6e0c0b79..efbc8d727 100644
--- a/src/components/LoginPasswordForm.tsx
+++ b/src/components/LoginPasswordForm.tsx
@@ -22,6 +22,8 @@ import Link from "next/link";
 import { useEnvContext } from "@app/hooks/useEnvContext";
 import { cleanRedirect } from "@app/lib/cleanRedirect";
 import MfaInputForm from "@app/components/MfaInputForm";
+import { LAST_USED_IDP_COOKIE_NAME } from "@app/lib/consts";
+import { setClientCookie } from "@app/lib/setClientCookie";
 
 type LoginPasswordFormProps = {
     identifier: string;
@@ -82,6 +84,12 @@ export default function LoginPasswordForm({
         const { password } = values;
         const { code } = mfaForm.getValues();
 
+        // delete last used auth cookie by setting it in the past
+        setClientCookie(LAST_USED_IDP_COOKIE_NAME, JSON.stringify(null), {
+            sameSite: "Lax",
+            days: -1
+        });
+
         setLoading(true);
         setError(null);