From 5391c7c6d6e622ca431c265e174c5acfa4b58a52 Mon Sep 17 00:00:00 2001 From: garrettmills Date: Thu, 15 Apr 2021 14:06:25 -0500 Subject: [PATCH] Check app ID on oidc auth --- app/controllers/OpenID.controller.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/OpenID.controller.js b/app/controllers/OpenID.controller.js index 1d0daec..66817b0 100644 --- a/app/controllers/OpenID.controller.js +++ b/app/controllers/OpenID.controller.js @@ -154,7 +154,7 @@ class OpenIDController extends Controller { } // If the user has already authorized this app, just redirect - if ( req.user.has_authorized({ id: params.client_id }) ) { + if ( req.user.has_authorized({ id: application.id }) ) { return res.redirect(`/openid/interaction/${uid.toLowerCase()}/grant`) }