fix(op): return state in token response only for implicit flow (#460)

* fix(op): return state in token response only for implicit flow * oops
zitadel · Oct 13, 2023 · 0dc2a6e · 0dc2a6e
1 parent 976b406
commit 0dc2a6e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/pkg/op/token.go b/pkg/op/token.go
@@ -51,7 +51,10 @@ func CreateTokenResponse(ctx context.Context, request IDTokenRequest, client Cli
 		if err != nil {
 			return nil, err
 		}
-		state = authRequest.GetState()
+		// only implicit flow requires state to be returned.
+		if code == "" {
+			state = authRequest.GetState()
+		}
 	}
 
 	exp := uint64(validity.Seconds())