fix: only require relaystate if redirect binding

zitadel · Oct 6, 2022 · 177a407 · 177a407
1 parent c3754f6
commit 177a407
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/provider/sso.go b/pkg/provider/sso.go
@@ -66,7 +66,8 @@ func (p *IdentityProvider) ssoHandleFunc(w http.ResponseWriter, r *http.Request)
 	)
 
 	// verify that relayState is provided
-	checkerInstance.WithValueNotEmptyCheck(
+	checkerInstance.WithConditionalValueNotEmpty(
+		func() bool { return authRequestForm.Binding == RedirectBinding },
 		"relayState",
 		func() string { return authRequestForm.RelayState },
 		func() {