Get session state in more robust way

ozwillo · Sep 19, 2019 · 52d9b63 · 52d9b63
1 parent bcce249
commit 52d9b63
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/ckanext/ozwillo_pyoidc/plugin.py b/ckanext/ozwillo_pyoidc/plugin.py
@@ -152,6 +152,8 @@ def callback(self):
                               action='read',
                               id=g.name))
         try:
+            # Grab state from query parameter if session does not have it
+            session['state'] = session.get('state', request.params.get('state'))
             userinfo, app_admin, app_user, access_token, id_token \
                 = client.callback(session['state'], request.GET)
             session['access_token'] = access_token