From d67befb6d59467984777b85e629c1334a4d06954 Mon Sep 17 00:00:00 2001 From: instipod Date: Sat, 23 Dec 2023 08:35:01 -0500 Subject: [PATCH] Change redirect type from HTTP 307 to HTTP 303 --- .../com/instipod/duouniversal/DuoUniversalAuthenticator.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/instipod/duouniversal/DuoUniversalAuthenticator.java b/src/main/java/com/instipod/duouniversal/DuoUniversalAuthenticator.java index 5ed5384..3ac56d5 100755 --- a/src/main/java/com/instipod/duouniversal/DuoUniversalAuthenticator.java +++ b/src/main/java/com/instipod/duouniversal/DuoUniversalAuthenticator.java @@ -275,7 +275,7 @@ private void startDuoProcess(AuthenticationFlowContext authenticationFlowContext try { String startingUrl = duoClient.createAuthUrl(username, loginState); - authenticationFlowContext.challenge(Response.temporaryRedirect(new URI(startingUrl)).build()); + authenticationFlowContext.challenge(Response.seeOther(new URI(startingUrl)).build()); } catch (Exception exception) { if (authConfig.getConfig().getOrDefault(DuoUniversalAuthenticatorFactory.DUO_FAIL_SAFE, "true").equalsIgnoreCase("false")) { // fail secure, deny login