Further fix invalid session endpoint

tvdijen · tvdijen · commit 3d4786a2dfa8 · 2023-07-31T12:10:51.000+02:00
diff --git a/modules/saml/src/Controller/Proxy.php b/modules/saml/src/Controller/Proxy.php
@@ -63,10 +63,14 @@ public function setAuthState(Auth\State $authState): void
     public function invalidSession(Request $request): Template|Response
     {
         // retrieve the authentication state
-        if (!$request->query->has('AuthState')) {
+        $stateId = $request->query->get('AuthState'); // GET
+        if ($stateId === null && $request->request->has('AuthState')) {
+            $stateId = $request->request->get('AuthState'); // POST
+        }
+
+        if (!is_string($stateId)) {
             throw new Error\BadRequest('Missing mandatory parameter: AuthState');
         }
-        $stateId = $request->query->get('AuthState');
 
         try {
             // try to get the state
