Oauth login buttons do not require a session.

kohler · Jan 21, 2024 · 303e339 · 303e339
1 parent 3dcdc64
commit 303e339
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/pages/p_signin.php b/src/pages/p_signin.php
@@ -265,11 +265,11 @@ function print_signin_form_oauth(Contact $user, Qrequest $qreq) {
             return;
         }
         $buttons = [];
-        $param = array_merge(["authtype" => null], $this->_oauth_hoturl_param ?? ["redirect" => $qreq->redirect]);
+        $param = array_merge(["authtype" => null, "post" => $qreq->maybe_post_value()], $this->_oauth_hoturl_param ?? ["redirect" => $qreq->redirect]);
         foreach ($conf->oauth_providers() as $authdata) {
             if ($authdata->button_html && !($authdata->disabled ?? false)) {
                 $param["authtype"] = $authdata->name;
-                $buttons[] = Ht::button($authdata->button_html, ["type" => "submit", "formaction" => $conf->hoturl("=oauth", $param), "formmethod" => "post", "class" => "mt-2 w-100 flex-grow-1"]);
+                $buttons[] = Ht::button($authdata->button_html, ["type" => "submit", "formaction" => $conf->hoturl("oauth", $param), "formmethod" => "post", "class" => "mt-2 w-100 flex-grow-1"]);
             }
         }
         if (!empty($buttons)) {