better separation between api and frontend login

auth/oidc.py

@@ -5,6 +5,7 @@ OIDC login auth module
 
 import flask
 from flask import jsonify
+from flask_login import login_user
 from flask_pyoidc.flask_pyoidc import OIDCAuthentication
 from flask_pyoidc.user_session import UserSession
 
@@ -50,8 +51,9 @@ def create_or_retrieve_user_from_userinfo(userinfo):
 @oidc_auth.oidc_auth()
 def oidc():
     user_session = UserSession(flask.session)
-    create_or_retrieve_user_from_userinfo(user_session.userinfo)
-    #login_user(user)
+    app.logger.info(user_session.userinfo)
+    user = create_or_retrieve_user_from_userinfo(user_session.userinfo)
+    login_user(user)
     return jsonify(id_token=user_session.id_token,
                    access_token=flask.session['access_token'],
                    userinfo=user_session.userinfo)