From ca02582352a4bf4c3845661996005b0bcd7b54d8 Mon Sep 17 00:00:00 2001
From: Ben Adida <ben@adida.net>
Date: Thu, 10 Nov 2011 19:18:12 -0800
Subject: [PATCH] Postel - be liberal in what you accept. Allowing verify calls
that are a mix of POST and GET
---
bin/verifier | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/bin/verifier b/bin/verifier
index 3ba9a5774..5470a6731 100755
--- a/bin/verifier
+++ b/bin/verifier
@@ -71,8 +71,8 @@ app.use(express.bodyParser());
app.post('/verify', function(req, resp, next) {
req.body = req.body || {}
- var assertion = req.body.assertion;
- var audience = req.body.audience;
+ var assertion = (req.query && req.query.assertion) ? req.query.assertion : req. body.assertion;
+ var audience = (req.query && req.query.audience) ? req.query.audience : req.body.audience;
if (!(assertion && audience))
return resp.json({ status: "failure", reason: "need assertion and audience" });
--
GitLab