diff --git a/packages/api/src/auth/authProvider.js b/packages/api/src/auth/authProvider.js
index 20c21d580..20b0933e0 100644
--- a/packages/api/src/auth/authProvider.js
+++ b/packages/api/src/auth/authProvider.js
@@ -89,6 +89,7 @@ class OAuthProvider extends AuthProviderBase {
 
     // Fallback to id_token in case the access_token is not a JWT
     // https://www.oauth.com/oauth2-servers/access-tokens/
+    // https://github.com/dbgate/dbgate/issues/727
     if (!payload && id_token) {
       payload = jwt.decode(id_token);
     }