From bcd0ae9bfc9aa6b01502bc029284841f2ee35061 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jaime=20Pe=CC=81rez?= <jaime.perez@uninett.no>
Date: Mon, 4 Jul 2016 13:53:29 +0200
Subject: [PATCH] bugfix: Do not set the auth token with the setCookie() method
from the session handler.
Related to previous commits. The SimpleSAML_Session::updateSessionCookies() updates both the session cookie and the auth token. For the latter, it uses the setCookie() method from the session handler, while it should use the SimpleSAML\Utils\HTTP::setCookie() method instead.
---
lib/SimpleSAML/Session.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/SimpleSAML/Session.php b/lib/SimpleSAML/Session.php
index 5373158c2..b96ee69db 100644
--- a/lib/SimpleSAML/Session.php
+++ b/lib/SimpleSAML/Session.php
@@ -676,7 +676,7 @@ class SimpleSAML_Session
if ($this->authToken !== null) {
$globalConfig = SimpleSAML_Configuration::getInstance();
- $sessionHandler->setCookie(
+ \SimpleSAML\Utils\HTTP::setCookie(
$globalConfig->getString('session.authtoken.cookiename', 'SimpleSAMLAuthToken'),
$this->authToken,
$params
--
GitLab