Merge pull request #613 from KuceraMartin/master

FacebookRedirectLoginHelper - let's not regenerate CSRF token
facebookarchive · Aug 6, 2016 · b44e2f4 · b44e2f4
2 parents f7ca208 + 88a4a59
commit b44e2f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Facebook/Helpers/FacebookRedirectLoginHelper.php b/src/Facebook/Helpers/FacebookRedirectLoginHelper.php
@@ -122,7 +122,7 @@ public function getPseudoRandomStringGenerator()
      */
     private function makeUrl($redirectUrl, array $scope, array $params = [], $separator = '&')
     {
-        $state = $this->pseudoRandomStringGenerator->getPseudoRandomString(static::CSRF_LENGTH);
+        $state = $this->persistentDataHandler->get('state') ?: $this->pseudoRandomStringGenerator->getPseudoRandomString(static::CSRF_LENGTH);
         $this->persistentDataHandler->set('state', $state);
 
         return $this->oAuth2Client->getAuthorizationUrl($redirectUrl, $state, $scope, $params, $separator);