-
-
Notifications
You must be signed in to change notification settings - Fork 253
Open
Description
When I open 2 tabs this way I opened first tab then opened second tab after returned first tab and tried to sign in flow is failing cos second tab overwrote state of first tab in session I did some debugging and I think we can make state as table
store state in the session
session:set("state", state)
session:set("nonce", nonce)
session:set("original_url", target_url)
session:set("code_verifier", code_verifier)
session:set("last_authenticated", ngx.time())
replace with following
local states = session:get("oidc_states") or {}
states[state] = {
nonce = nonce,
code_verifier = code_verifier,
created_at = ngx.time()
}
session:set("oidc_states", states)
session:set("original_url", target_url)
session:set("last_authenticated", ngx.time())
Metadata
Metadata
Assignees
Labels
No labels