Fix admin.protectmetadata - The metadata endpoints would show a blank…

… page instead of an admin-login page
simplesamlphp · Aug 11, 2023 · bede862 · bede862
1 parent 8b2e3e9
commit bede862
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/Controller/Adfs.php b/src/Controller/Adfs.php
@@ -69,9 +69,9 @@ public function metadata(Request $request): Response
         }
 
         // check if valid local session exists
-        if ($this->config->getOptionalBoolean('admin.protectmetadata', false)) {
-            $authUtils = new Utils\Auth();
-            $authUtils->requireAdmin();
+        $authUtils = new Utils\Auth();
+        if ($this->config->getOptionalBoolean('admin.protectmetadata', false) && !$authUtils->isAdmin()) {
+            return new RunnableResponse([$authUtils, 'requireAdmin']);
         }
 
         try {