auth: Exempt SAML ACS view from CSRF

schilder2000/__init__.py

@@ -33,6 +33,10 @@ def create_app():
     multipass.identity_handler(identity_handler)
     multipass.init_app(app)
 
+    for k, v in app.view_functions.items():
+        if k.startswith("_flaskmultipass_saml_acs_"):
+            csrf.exempt(v)
+
     app.config.update(
         {
             "WEBPACK_LOADER": {

schilder2000/helpers.py

@@ -101,6 +101,7 @@ def identity_handler(identity_info: IdentityInfo):
         data=identity_info.data,
     )
 
+
 def require_login():
     if "identity" not in session:
         return redirect(url_for("login"))