fix(client-login-flow): Use correct response for missing state token

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
This commit is contained in:
Christoph Wurst 2023-02-09 14:11:28 +01:00
parent 2c05c2479e
commit 024adc14b1
No known key found for this signature in database
GPG key ID: CC42AC2A7F0E56D8

View file

@ -187,7 +187,7 @@ class ClientFlowLoginV2Controller extends Controller {
*/
public function apptokenRedirect(?string $stateToken, string $user, string $password) {
if ($stateToken === null) {
return $this->loginTokenForbiddenResponse();
return $this->stateTokenMissingResponse();
}
if (!$this->isValidStateToken($stateToken)) {