Remove iss check from the determineTokenSource method (#452)

blazerunner44 · web-flow · commit 9854480216da · 2025-11-07T19:10:55.000Z
diff --git a/src/Objects/Values/SessionToken.php b/src/Objects/Values/SessionToken.php
@@ -398,7 +398,7 @@ protected function verifyExpiration(): void
 
     protected function determineTokenSource(array $body): int
     {
-        if (!isset($body['iss']) && !isset($body['sid'])) {
+        if (!isset($body['sid'])) {
             return SessionTokenSource::CHECKOUT_EXTENSION;
         }
 

Original file line number	Diff line number	Diff line change
`@@ -398,7 +398,7 @@ protected function verifyExpiration(): void`
`398`	`398`
`399`	`399`	`protected function determineTokenSource(array $body): int`
`400`	`400`	`{`
`401`		`- if (!isset($body['iss']) && !isset($body['sid'])) {`
	`401`	`+ if (!isset($body['sid'])) {`
`402`	`402`	`return SessionTokenSource::CHECKOUT_EXTENSION;`
`403`	`403`	`}`
`404`	`404`