hellocoop / wordpress

A login and registration WordPress plugin for the Hellō service.
4 stars 2 forks source link

Invalid State error at the end of the "Login with Hellō" flow #88

Closed mscurtescu closed 1 year ago

mscurtescu commented 1 year ago

Describe the bug

To Reproduce Steps to reproduce the behavior:

  1. Login in and out multiple times

Or using curl:

  1. Run the following command multiple times: curl -v "https://hellocoopdev.wpengine.com/?hello-login=start&redirect_to_path=%2Fwp-admin%2F"
  2. You should get a 302 and the watch the location response header
  3. The state parameter in the location value URL eventually will be the same in successive requests

Screenshots image

mscurtescu commented 1 year ago

released plugin v1.1.1 with a fix