Validate OIDC Session State

bitly · Jun 21, 2018 · 1e7cd88 · 1e7cd88
1 parent bf0957d
commit 1e7cd88
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/providers/oidc.go b/providers/oidc.go
@@ -123,3 +123,13 @@ func (p *OIDCProvider) createSessionState(token *oauth2.Token, ctx context.Conte
 		Email:        claims.Email,
 	}, nil
 }
+
+func (p *OIDCProvider) ValidateSessionState(s *SessionState) bool {
+	ctx := context.Background()
+	_, err := p.Verifier.Verify(ctx, s.IdToken)
+	if err != nil {
+		return false
+	}
+
+	return true
+}