| commit | bd6b43ac70eeb2ae5f8dda6b358f3de41f544f49 | |
| author | Stephen Nielson <snielson@discoverandchange.com> | |
| Tue, 18 Apr 2023 14:04:20 +0000 (18 10:04 -0400) | ||
| committer | GitHub <noreply@github.com> | |
| Tue, 18 Apr 2023 14:04:20 +0000 (18 10:04 -0400) | ||
| tree | 63196de56cf495cbf850c9e6f1c2012d3c02f6fe | treesnapshot (tar.gz zip) |
| parent | 0c38556a0d6510864975773563a83543bc6ed293 | commitdiff |
Fix first party cookie redirect with post submit (#6370)
* Fix first party cookie redirect with post submit
We had a bug in gmail and other browser based email programs trying to
use the one time login which would have their cookies blocked and the
sessions would be lost.
Changed up the process so it takes the sso request and then submits it
as a post request automatically via javascript. User has a button to do
the submission as well manually if anything goes wrong.
Also added CSRF protection to this.
* Fix style problems.
* Fixed todos, escaping, translation
* Fix first party cookie redirect with post submit
We had a bug in gmail and other browser based email programs trying to
use the one time login which would have their cookies blocked and the
sessions would be lost.
Changed up the process so it takes the sso request and then submits it
as a post request automatically via javascript. User has a button to do
the submission as well manually if anything goes wrong.
Also added CSRF protection to this.
* Fix style problems.
* Fixed todos, escaping, translation