fix: break endless login loop with too short max_age values

panva · Jun 19, 2019 · 66c7968 · 66c7968
1 parent 9fd3fba
commit 66c7968
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/helpers/interaction/prompts/login/max_age.js b/lib/helpers/interaction/prompts/login/max_age.js
@@ -10,7 +10,7 @@ module.exports = new Check('max_age', 'End-User authentication could not be obta
     return true;
   }
 
-  if (oidc.session.past(oidc.params.max_age)) {
+  if (oidc.session.past(oidc.params.max_age) && (!ctx.oidc.result || !ctx.oidc.result.login)) {
     return true;
   }