Pārlūkot izejas kodu

Fix SAML Client login flow on Apple devices

Because the redirect from the SAML/SSO endpoint is a POST the lax/strict
cookies are not properly send.

Note that it is not strictly requried on this endpoint as we do not need
the remember me data. Only the real session info is enough. The endpoint
is also already protected by a state token.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
tags/v16.0.0alpha1
Roeland Jago Douma pirms 5 gadiem
vecāks
revīzija
763b52d402
Revīzijas autora e-pasta adrese nav piesaistīta nevienam kontam
1 mainītis faili ar 1 papildinājumiem un 0 dzēšanām
  1. 1
    0
      core/Controller/ClientFlowLoginController.php

+ 1
- 0
core/Controller/ClientFlowLoginController.php Parādīt failu

@@ -207,6 +207,7 @@ class ClientFlowLoginController extends Controller {
/**
* @NoAdminRequired
* @NoCSRFRequired
* @NoSameSiteCookieRequired
* @UseSession
*
* @param string $stateToken

Notiek ielāde…
Atcelt
Saglabāt