Merge pull request #28 from zitadel/relaystate

fix: only require relaystate if redirect binding
zitadel · Oct 7, 2022 · fbd6044 · fbd6044
2 parents c3754f6 + 177a407
commit fbd6044
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/provider/sso.go b/pkg/provider/sso.go
@@ -66,7 +66,8 @@ func (p *IdentityProvider) ssoHandleFunc(w http.ResponseWriter, r *http.Request)
 	)
 
 	// verify that relayState is provided
-	checkerInstance.WithValueNotEmptyCheck(
+	checkerInstance.WithConditionalValueNotEmpty(
+		func() bool { return authRequestForm.Binding == RedirectBinding },
 		"relayState",
 		func() string { return authRequestForm.RelayState },
 		func() {