defensive check for sid for SLO

danielcibely · Feb 16, 2016 · 5c2a480 · 5c2a480
1 parent edfa6af
commit 5c2a480
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/source/Clients/MVC OWIN Client (Hybrid)/Controllers/HomeController.cs b/source/Clients/MVC OWIN Client (Hybrid)/Controllers/HomeController.cs
@@ -54,8 +54,8 @@ public ActionResult Signout()
         public void OidcSignOut(string sid)
         {
             var cp = (ClaimsPrincipal)User;
-            var sidClaim = cp.Claims.First(x => x.Type == "sid").Value;
-            if (sidClaim == sid)
+            var sidClaim = cp.FindFirst("sid");
+            if (sidClaim != null && sidClaim.Value == sid)
             {
                 Request.GetOwinContext().Authentication.SignOut("Cookies");
             }