Only read cached access token if the feature is enabled.

Closes #264
okta · Jan 31, 2025 · 4e76eaa · 4e76eaa
1 parent d5d59f1
commit 4e76eaa
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/internal/webssoauth/webssoauth.go b/internal/webssoauth/webssoauth.go
@@ -1058,8 +1058,12 @@ func RemoveCachedAccessToken() bool {
 }
 
 // cachedAccessToken will returned the cached access token if it exists and is
-// not expired.
+// not expired and --cached-access-token is enabled.
 func (w *WebSSOAuthentication) cachedAccessToken() (at *okta.AccessToken) {
+	if !w.config.CacheAccessToken() {
+		return
+	}
+
 	accessTokenPath, err := cachedAccessTokenPath()
 	if err != nil {
 		return