libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

KEYCLOAK-2617 Ignore postmessages if not initiated by keycloak.js

Browse source
This commit is contained in:
Stian Thorgersen 2016-07-04 13:07:17 +02:00
parent 450b57c76a
commit f3a780cc2d
1 changed files with 16 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
adapters/oidc/js/src/main/resources/keycloak.js
View file

@ -792,8 +792,22 @@
if (event.origin !== loginIframe.iframeOrigin) {
return;
}
try {
var data = JSON.parse(event.data);
} catch (err) {
return;
}
if (!data.callbackId) {
return;
}
var promise = loginIframe.callbackMap[data.callbackId];
if (!promise) {
return;
}
delete loginIframe.callbackMap[data.callbackId];
if ((!kc.sessionId || kc.sessionId == data.session) && data.loggedIn) {