FriendsOfSymfony / FOSOAuthServerBundle

A server side OAuth2 Bundle for Symfony
1.09k stars 451 forks source link

ensure_logout with CSRF Token #628

Open christoph-pflueger opened 4 years ago

christoph-pflueger commented 4 years ago

The ensure_logout functionality does not work in combination with a CSRF token as the controller invalidates the session before validating the form, hence the form is always invalid. Should be an easy fix.