mirror of
https://github.com/BookStackApp/BookStack.git
synced 2024-09-17 23:05:47 +00:00
cdef1b3ab0
Session was being lost due to the callback POST request cookies not being provided due to samesite=lax. This instead adds an additional hop in the flow to route the request via a GET request so the session is retained. SAML POST data is stored encrypted in cache via a unique ID then pulled out straight afterwards, and restored into POST for the SAML toolkit to validate. Updated testing to cover. |
||
---|---|---|
.. | ||
Guards | ||
Mfa | ||
Oidc | ||
EmailConfirmationService.php | ||
ExternalBaseUserProvider.php | ||
GroupSyncService.php | ||
Ldap.php | ||
LdapService.php | ||
LoginService.php | ||
RegistrationService.php | ||
Saml2Service.php | ||
SocialAuthService.php | ||
UserInviteService.php | ||
UserTokenService.php |