search

aspnet / AspNetKatana

Microsoft's OWIN implementation, the Katana project
Apache License 2.0
960 stars 331 forks source link

Only add nonce if we are redirecting (#440) #441

Closed pergardebrink closed 2 years ago

pergardebrink commented 2 years ago

This is a proposed fix for #440 that only adds the nonce cookie when the RedirectToIdentityProvider is not handled

Tratcher commented 2 years ago

I expect this will break apps that are customizing the redirect but still need the cookie. I've made some alternate suggestions in the issue. Closing for now.