From 692ac6dec4d1a13a590e62379b8a35bc20e8f295 Mon Sep 17 00:00:00 2001
From: Chris Christiansen <chris.christiansen@vauco.no>
Date: Wed, 17 Jun 2026 17:11:41 +0000
Subject: [PATCH] fix(opax-mcp): correct IAP client ID for opax.vauco.no

Previous client ID was wrong (ka7t2fv9...). Correct ID from
Location redirect header is kq8nt71d38hfqlcfb3n52ef7ala4meo.
---
 opax-mcp/server.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/opax-mcp/server.py b/opax-mcp/server.py
index 722ea6c..5d2a8e0 100644
--- a/opax-mcp/server.py
+++ b/opax-mcp/server.py
@@ -12,7 +12,7 @@ from typing import Optional, Any
 app = FastAPI(title="opax-mcp", version="2.0.0")
 
 OPAX_BASE_URL = os.environ.get("OPAX_BASE_URL", "https://opax.vauco.no")
-IAP_CLIENT_ID = os.environ.get("IAP_CLIENT_ID", "357036551735-ka7t2fv9ue2jp01bs826hpdctlvispuo.apps.googleusercontent.com")
+IAP_CLIENT_ID = os.environ.get("IAP_CLIENT_ID", "357036551735-kq8nt71d38hfqlcfb3n52ef7ala4meo.apps.googleusercontent.com")
 
 async def _iap_token() -> str:
     """Fetch IAP identity token from GCP metadata server."""