fix(passport): update validateInResponseTo always

GluuFederation · Aug 29, 2024 · 324b67d · 324b67d
1 parent 1991056
commit 324b67d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/extra-passport-params.js b/server/extra-passport-params.js
@@ -10,7 +10,7 @@ const params = R.once(() => [
     strategy: '@node-saml/passport-saml',
     passportAuthnParams: {},
     options: {
-      validateInResponseTo: true,
+      validateInResponseTo: 'always',
       requestIdExpirationPeriodMs: 3600000,
       decryptionPvk: fs.readFileSync(global.config.spTLSKey, 'utf-8'),
       decryptionCert: fs.readFileSync(global.config.spTLSCert, 'utf-8')