Add additional CSRF protection when FusionAuth is functioning as a SAML IdP

[andrewpai]

Add additional CSRF protection when FusionAuth is functioning as a SAML IdP #2611

Description

If a SAML state contains an unregistered redirect URI in its acs value, override it with the first registered URI.

Is this a question about how to use FusionAuth? Please consider posting on the FusionAuth forum instead.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

Release Notes

Add additional protection against cross-site attacks when FusionAuth is acting as a SAML IdP.

[robotdan]

@andrewpai is this a bug, or an enhancement request?

[andrewpai]

Internal:

• https://github.com/FusionAuth/fusionauth-app/pull/366

[andrewpai]

@andrewpai is this a bug, or an enhancement request?

Updated as an enhancement, as the implementation adds additional cross-site protection.