keep redirect url in sso as well, provide constant for default kept variables, fixes #5593

Closes #5593

Merge request studip/studip!4270

1 files changed, 12 insertions, 2 deletions

diff --git a/lib/middleware/AuthenticationMiddleware.php b/lib/middleware/AuthenticationMiddleware.php
index 10de004..5792e15 100644
--- a/lib/middleware/AuthenticationMiddleware.php
+++ b/lib/middleware/AuthenticationMiddleware.php
@@ -23,13 +23,23 @@ use Studip\Authentication\Manager;
 
 final class AuthenticationMiddleware implements MiddlewareInterface
 {
-    public function __construct(private Manager $auth_manager, private ResponseFactoryInterface $response_factory)
-    {
+    public function __construct(
+        private readonly Manager $auth_manager,
+        private readonly ResponseFactoryInterface $response_factory
+    ) {
     }
 
     public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
     {
         if ($this->auth_manager->start()) {
+            if (isset($_SESSION['redirect_after_login'] )) {
+                $redirect = $_SESSION['redirect_after_login'];
+                unset($_SESSION['redirect_after_login']);
+
+                return $this->response_factory->createResponse(302)
+                    ->withHeader('Location', $redirect);
+            }
+
             return $handler->handle($request);
         } else {
             if (!match_route('dispatch.php/start')) {