mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-30 18:46:01 +01:00
fix: accidental unnecessarily strict conditional that effectively rendered SSO state checking opt-in instead of opt-out
This commit is contained in:
@@ -104,7 +104,7 @@ Auth.reloadRoutes = async function (params) {
|
||||
prompt: strategy.prompt || undefined,
|
||||
};
|
||||
|
||||
if (strategy.checkState) {
|
||||
if (strategy.checkState !== false) {
|
||||
req.session.ssoState = req.csrfToken && req.csrfToken();
|
||||
opts.state = req.session.ssoState;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user