Always return the session object from openidc.authenticate() as this is needed for the caller, if it wants to modify session data with lua-resty-session
Always return the session object from openidc.authenticate() as this is
needed for the caller, if it wants to modify session data with
lua-resty-session

pingidentity/lua-resty-openidc