fix(op): return state in token response only for implicit flow

This commit is contained in:
Tim Möhlmann 2023-10-13 14:58:18 +03:00
parent 976b40620c
commit 8e605a4cc4

View file

@ -51,7 +51,10 @@ func CreateTokenResponse(ctx context.Context, request IDTokenRequest, client Cli
if err != nil {
return nil, err
}
state = authRequest.GetState()
// only implicit flow requires state to be returned.
if code != "" {
state = authRequest.GetState()
}
}
exp := uint64(validity.Seconds())