Merge pull request #36634 from nextcloud/fix/client-login-flow/state-token-missing-response

MichaIng · web-flow · commit 0d67fc23f407 · 2023-02-27T16:34:07.000+01:00
fix(client-login-flow): Use correct response for missing state token
diff --git a/core/Controller/ClientFlowLoginV2Controller.php b/core/Controller/ClientFlowLoginV2Controller.php
@@ -187,7 +187,7 @@ public function grantPage(?string $stateToken): StandaloneTemplateResponse {
 	 */
 	public function apptokenRedirect(?string $stateToken, string $user, string $password) {
 		if ($stateToken === null) {
-			return $this->loginTokenForbiddenResponse();
+			return $this->stateTokenMissingResponse();
 		}
 
 		if (!$this->isValidStateToken($stateToken)) {

Original file line number	Diff line number	Diff line change
`@@ -187,7 +187,7 @@ public function grantPage(?string $stateToken): StandaloneTemplateResponse {`
`187`	`187`	`*/`
`188`	`188`	`public function apptokenRedirect(?string $stateToken, string $user, string $password) {`
`189`	`189`	`if ($stateToken === null) {`
`190`		`- return $this->loginTokenForbiddenResponse();`
	`190`	`+ return $this->stateTokenMissingResponse();`
`191`	`191`	`}`
`192`	`192`
`193`	`193`	`if (!$this->isValidStateToken($stateToken)) {`