Skip to content

Fix authentication bypass with AllowIDPInitiated #659

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
aashh wants to merge 1 commit into
base: main
Choose a base branch
from

fix: validate InResponseTo when present, even with AllowIDPInitiated

3e082c1
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
Open

Fix authentication bypass with AllowIDPInitiated #659

fix: validate InResponseTo when present, even with AllowIDPInitiated
3e082c1
Select commit
Loading
Failed to load commit list.
golangci
succeeded Feb 9, 2026 in 40s