aboutsummaryrefslogtreecommitdiff
path: root/www/logged_in_p.pl
diff options
context:
space:
mode:
authorMatthias Benkard <matthias.benkard@egym.de>2015-04-14 08:39:27 +0000
committerMatthias Andreas Benkard <code@mail.matthias.benkard.de>2015-04-23 21:55:02 +0200
commitba65cc50b7b468f0738398312a468ea413727bdc (patch)
tree19749bd8803a2f718013cf8901c04ea658f98731 /www/logged_in_p.pl
parentfaea34e5c94922645b337bdeb5db32871eb1fde9 (diff)
QT-1900 Add a CSRF token to the OIDC login flow.
This improves security by generating a CSRF token, passing it to the OIDC IdP, and validating it afterwards. The token is stored in a cookie reverse-encrypted with MulkyID's private key.
Diffstat (limited to 'www/logged_in_p.pl')
-rwxr-xr-xwww/logged_in_p.pl1
1 files changed, 0 insertions, 1 deletions
diff --git a/www/logged_in_p.pl b/www/logged_in_p.pl
index b076618..5752959 100755
--- a/www/logged_in_p.pl
+++ b/www/logged_in_p.pl
@@ -52,4 +52,3 @@ while (my $cgi = new CGI::Fast) {
say encode_json({logged_in_p => 0});
}
}
-