feat: filter out finalized sessions in status and get_redirect endpoints

pyeudiw/satosa/backend.py

@@ -408,7 +408,17 @@ def redirect_endpoint(self, context, *args):
                 err=f"{e.__class__.__name__}: {e}",
                 err_code="400"
             )
-
+
+        if stored_session["finalized"]:
+            _msg = f"Session already finalized"
+            return self.handle_error(
+                context=context,
+                message="invalid_request",
+                troubleshoot=_msg,
+                err=f"{e.__class__.__name__}: {e}",
+                err_code="400"
+            )
+
         # TODO: handle vp token ops exceptions
         try:
             vpt.load_nonce(stored_session['nonce'])
@@ -800,6 +810,16 @@ def status_endpoint(self, context):
                 err_code="401"
             )
 
+        if session["finalized"]:
+            _msg = f"Session already finalized"
+            return self.handle_error(
+                context=context,
+                message="invalid_request",
+                troubleshoot=_msg,
+                err=f"{e.__class__.__name__}: {e}",
+                err_code="400"
+            )
+
         # TODO: if the request is expired -> return 403
         if session["finalized"]:
             #  return Redirect(