Fix reauth: we were hooking into the auth-proces too late

tvdijen · tvdijen · commit cf19ac3ab221 · 2023-07-31T14:09:54.000+02:00
diff --git a/modules/saml/src/Controller/Proxy.php b/modules/saml/src/Controller/Proxy.php
@@ -98,10 +98,10 @@ public function invalidSession(Request $request): Template|Response
 
         if ($request->request->has('continue')) {
             /** @var \SimpleSAML\Module\saml\Auth\Source\SP $as */
-            $as = Auth\Source::getById($state['saml:sp:AuthId'], SP::class);
+            $as = new \SimpleSAML\Auth\Simple($state['saml:sp:AuthId']);
 
             // log the user out before being able to login again
-            return $as->reauthLogout($this->config, $state);
+            return $as->login($state);
         }
 
         $template = new Template($this->config, 'saml:proxy/invalid_session.twig');
