SURFnet / surf-token-based-access

1 stars 1 forks source link

preserve client_id and ticket query params across SRAM login #60

Closed michielbdejong closed 1 month ago

michielbdejong commented 1 month ago

If you're not logged in when doing a ticket flow, then when you come back from SRAM, the client_id and ticket are gone from the query of the URL. We should store them in state param or in cookie or something, and restore them from there afterwards.

michielbdejong commented 1 month ago

hm, openid-client complains that: checks.state argument is missing

michielbdejong commented 1 month ago

Ah right https://stackoverflow.com/a/78420267/680454 openid-client assumes I'm using state to check, not to store info. so maybe I'll just use cookies then