fix(op): return state in token response only for implicit flow

This commit is contained in:
Tim Möhlmann 2023-10-13 14:58:18 +03:00
parent 976b40620c
commit 8e605a4cc4

View file

@ -51,8 +51,11 @@ func CreateTokenResponse(ctx context.Context, request IDTokenRequest, client Cli
if err != nil {
return nil, err
}
// only implicit flow requires state to be returned.
if code != "" {
state = authRequest.GetState()
}
}
exp := uint64(validity.Seconds())
return &oidc.AccessTokenResponse{