diff --git a/go.mod b/go.mod
index dc7aa404..29cfbeba 100644
--- a/go.mod
+++ b/go.mod
@@ -17,8 +17,7 @@ require (
 	github.com/iancoleman/strcase v0.3.0
 	github.com/martinlindhe/base36 v1.1.1
 	github.com/open-policy-agent/opa v1.0.0
-	github.com/pomerium/csrf v1.7.0
-	github.com/pomerium/pomerium v0.28.1-0.20250106184142-95d4a24271fe
+	github.com/pomerium/pomerium v0.28.1-0.20250108215757-21b9e7890c75
 	github.com/rs/zerolog v1.33.0
 	github.com/sergi/go-diff v1.3.1
 	github.com/spf13/cobra v1.8.1
@@ -165,6 +164,7 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
+	github.com/pomerium/csrf v1.7.0 // indirect
 	github.com/pomerium/datasource v0.18.2-0.20221108160055-c6134b5ed524 // indirect
 	github.com/pomerium/protoutil v0.0.0-20240813175624-47b7ac43ff46 // indirect
 	github.com/pomerium/webauthn v0.0.0-20240603205124-0428df511172 // indirect
diff --git a/go.sum b/go.sum
index d8f802cb..98d65647 100644
--- a/go.sum
+++ b/go.sum
@@ -577,8 +577,8 @@ github.com/pomerium/csrf v1.7.0 h1:Qp4t6oyEod3svQtKfJZs589mdUTWKVf7q0PgCKYCshY=
 github.com/pomerium/csrf v1.7.0/go.mod h1:hAPZV47mEj2T9xFs+ysbum4l7SF1IdrryYaY6PdoIqw=
 github.com/pomerium/datasource v0.18.2-0.20221108160055-c6134b5ed524 h1:3YQY1sb54tEEbr0L73rjHkpLB0IB6qh3zl1+XQbMLis=
 github.com/pomerium/datasource v0.18.2-0.20221108160055-c6134b5ed524/go.mod h1:7fGbUYJnU8RcxZJvUvhukOIBv1G7LWDAHMfDxAf5+Y0=
-github.com/pomerium/pomerium v0.28.1-0.20250106184142-95d4a24271fe h1:D88aRs69SoCW2dBLH18KUTP745Z14ie3ntR1wDltRNs=
-github.com/pomerium/pomerium v0.28.1-0.20250106184142-95d4a24271fe/go.mod h1:dN6aamEauNZXIEfWJx9zOjhpF1BAHiPiNL6hMPiq+g0=
+github.com/pomerium/pomerium v0.28.1-0.20250108215757-21b9e7890c75 h1:WB5HTLIBbhhBkaXt5izMlCyr0QB+MP3VdTO164zLPhE=
+github.com/pomerium/pomerium v0.28.1-0.20250108215757-21b9e7890c75/go.mod h1:dN6aamEauNZXIEfWJx9zOjhpF1BAHiPiNL6hMPiq+g0=
 github.com/pomerium/protoutil v0.0.0-20240813175624-47b7ac43ff46 h1:NRTg8JOXCxcIA1lAgD74iYud0rbshbWOB3Ou4+Huil8=
 github.com/pomerium/protoutil v0.0.0-20240813175624-47b7ac43ff46/go.mod h1:QqZmx6ZgPxz18va7kqoT4t/0yJtP7YFIDiT/W2n2fZ4=
 github.com/pomerium/webauthn v0.0.0-20240603205124-0428df511172 h1:TqoPqRgXSHpn+tEJq6H72iCS5pv66j3rPprThUEZg0E=