diff --git a/modules/saml/www/sp/saml2-acs.php b/modules/saml/www/sp/saml2-acs.php index b287ef5b4e0fb71cde9c69d30637fcfd47bb2b8d..ff80e3c3c33637b640bc3f4f58701e7b9a76c3e1 100644 --- a/modules/saml/www/sp/saml2-acs.php +++ b/modules/saml/www/sp/saml2-acs.php @@ -69,7 +69,7 @@ $issuer = $issuer->getValue(); $session = Session::getSessionFromRequest(); $prevAuth = $session->getAuthData($sourceId, 'saml:sp:prevAuth'); -/** @psalm-var string $issuer */ + if ($prevAuth !== null && $prevAuth['id'] === $response->getId() && $prevAuth['issuer'] === $issuer) { /* OK, it looks like this message has the same issuer * and ID as the SP session we already have active. We