commit 763ddf094477ad728c764873e473e3ef54d5be89 Author: smarcet Date: Tue Sep 8 11:05:41 2020 -0300 Fixed empty postlogout uri Change-Id: Ife62edb273ed07f44f08064d39b6161a011bf211 Signed-off-by: smarcet diff --git a/app/Models/OAuth2/Client.php b/app/Models/OAuth2/Client.php index 231aab0..f95ccf7 100644 --- a/app/Models/OAuth2/Client.php +++ b/app/Models/OAuth2/Client.php @@ -1024,6 +1024,9 @@ class Client extends BaseEntity implements IClient */ public function isPostLogoutUriAllowed($post_logout_uri) { + if(empty($this->post_logout_redirect_uris)) return false; + if(empty($post_logout_uri)) return false; + if(!filter_var($post_logout_uri, FILTER_VALIDATE_URL)) return false; $parts = @parse_url($post_logout_uri);