UY-1453 fix state in error handling

unity-idm · Jun 12, 2024 · 41aba38 · 41aba38
1 parent 533d078
commit 41aba38
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/oauth/src/main/java/pl/edu/icm/unity/oauth/as/webauthz/OAuthAuthzWebEndpoint.java b/oauth/src/main/java/pl/edu/icm/unity/oauth/as/webauthz/OAuthAuthzWebEndpoint.java
@@ -27,6 +27,7 @@
 
 import com.nimbusds.oauth2.sdk.AuthorizationErrorResponse;
 import com.nimbusds.oauth2.sdk.SerializeException;
+import com.nimbusds.oauth2.sdk.id.State;
 import com.nimbusds.openid.connect.sdk.OIDCError;
 
 import eu.unicore.util.configuration.ConfigurationException;
@@ -234,7 +235,7 @@ private void returnOAuthError(HttpServletRequest request, HttpServletResponse re
 		{
 			OAuthAuthzContext ctx = OAuthSessionService.getContext(request).get();
 			AuthorizationErrorResponse oauthResponse = new AuthorizationErrorResponse(ctx.getReturnURI(),
-					OIDCError.LOGIN_REQUIRED, ctx.getRequest().getState(),
+					OIDCError.LOGIN_REQUIRED,  State.parse(request.getParameter("state")),
 					ctx.getRequest().impliedResponseMode());
 			try
 			{