diff --git a/app/models/api/openid_connect/authorization.rb b/app/models/api/openid_connect/authorization.rb
index dfb6a3e9a..fb8c006cc 100644
--- a/app/models/api/openid_connect/authorization.rb
+++ b/app/models/api/openid_connect/authorization.rb
@@ -38,6 +38,7 @@ module Api
       def create_code
         SecureRandom.hex(32).tap do |code|
           update!(code: code)
+          update!(code_used: false)
         end
       end