Getting race condition while trying to login using auth() about express-openid-connect HOT 8 CLOSED

const path = require('path');
const express = require('express')
const app = express();
var fs = require('fs');
var https = require('https');
var url = require('url');
var querystring = require('querystring');

const { auth } = require("express-openid-connect")
const session = require("express-session")

const Sequelize = require('sequelize');
const SequelizeStore = require('connect-session-sequelize')(session.Store);

const AUTH0_DOMAIN = process.env.AUTH0_DOMAIN || "no-auth0-domain.available";
const APPLICATION_URL = process.env.APPLICATION_URL || "no-application-url.available";
const AUTH0_CLIENT_ID = process.env.AUTH0_CLIENT_ID || "no-auth0-client-id.available";

var sequelize = new Sequelize(
    "<db_name>",
    "<db_user>",
    "<db_pwd>", 
    {
    "dialect": "postgres"
});

app.get('/', (req, res) => {
    res.sendFile(path.join(__dirname + '/index.html'));
})

app.use(express.urlencoded({ extended: false }));

// external session store 
const customStore = new SequelizeStore({
    db: sequelize
});

// express session 
app.use(session({
    resave: false,
    saveUninitialized: false,
    name: 'aaa',
    secret: "b3c1d6a7-06b2-4c04-99c9-a52994fpad9a",
    proxy: true,
    cookie: {
        httpOnly: true,
        sameSite: 'lax',
        secure: true
    },
    store: customStore,
}));

customStore.sync();

// this is where we are calling auth()
app.use(auth({
    issuerBaseURL: `https://${AUTH0_DOMAIN}/`,
    baseURL: APPLICATION_URL,
    clientID: AUTH0_CLIENT_ID,
    legacySameSiteCookie: false,
    appSessionSecret: "aaa",
    required: (req) => {
        return !req.user && req.originalUrl !== "/";
    }
}));

//read sub
app.use((req, res, next) => {
    if (req.user) {
        req.operationPortalUser = req.user;
        next();
    } else if (req.openid && req.openid.isAuthenticated) {
        req.operationPortalUser = req.openid.user;
        next();
    }
    else {
        res.status(401).send();
    }
});

app.get('/account/logout', (req, res) => {
    //  return res.send();
    req.session.destroy(function (err) {
        console.info('session destroyed');
    })
    //res.openid.logout();
    //Check that cookies are deleted !!!!
    var logoutURL = new url.URL(`https://${AUTH0_DOMAIN}/v2/logout`);

    var searchString = querystring.stringify({
        client_id: AUTH0_CLIENT_ID,
        returnTo: "https://localhost:5000/logout"
    });
    logoutURL.search = searchString;
    return res.redirect(logoutURL);
})

app.get('/test', (req, res) => {
    res.send(`hello ${JSON.stringify(req.operationPortalUser)}.`);
});

app.get('/authenticatedPage', (req, res) => {
    res.sendFile(path.join(__dirname + '/authenticatedIndex.html'));
});


var privateKey = fs.readFileSync('key.pem');
var certificate = fs.readFileSync('cert.pem');


https.createServer({
    key: privateKey,
    cert: certificate
}, app).listen(5000);