fix: address issue #8287 with blank SAML's RelayState

2 years ago · 61ff3db0f1
1 changed files with 4 additions and 1 deletions
--- a/apps/authentication/backends/saml2/views.py
+++ b/apps/authentication/backends/saml2/views.py
@ -271,7 +271,10 @@ class Saml2AuthCallbackView(View, PrepareRequestMixin):
            auth.login(self.request, user)

        logger.debug(log_prompt.format('Redirect'))
-        next_url = saml_instance.redirect_to(post_data.get('RelayState', '/'))
+        redir = post_data.get('RelayState')
+        if not redir or len(redir) == 0:
+          redir = "/"
+        next_url = saml_instance.redirect_to(redir)
        return HttpResponseRedirect(next_url)

    @csrf_exempt