sessionChecksEnabled is not respected if discovery doc contains check_session_iframe

manfredsteyer / angular2-oauth2

63 stars 49 forks source link

sessionChecksEnabled is not respected if discovery doc contains check_session_iframe #37

Closed ydg closed 7 years ago

ydg commented 7 years ago

I use the default value of sessionChecksEnabled (false). In the validateDiscoveryDocument function this.sessionChecksEnabled = doc['check_session_iframe']; so later if(this.sessionChecksEnabled) will be true (even if I specified false initially)