From 368574429076dd4973cc17cc7b1a9d8bdd724010 Mon Sep 17 00:00:00 2001
From: bcleenders <bcleenders@gmail.com>
Date: Mon, 11 May 2015 16:06:22 +0200
Subject: [PATCH] Explicitly disable auth on callback path

---
 lib/index.js | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/lib/index.js b/lib/index.js
index b5d2b99..77c056f 100644
--- a/lib/index.js
+++ b/lib/index.js
@@ -14,11 +14,14 @@ exports.register = function(plugin, options, next) {
     // NOTE: needs to be '*'
     method: '*',
     path: path,
-    handler: function(request, reply) {
-      plugin.log(['debug', 'callback'], JSON.stringify(request.auth));
-
-      // Run authentication
-      samlHapi.authenticate(settings)(request, reply);
+    config: {
+      auth: false,
+      handler: function(request, reply) {
+        plugin.log(['debug', 'callback'], JSON.stringify(request.auth));
+
+        // Run authentication
+        samlHapi.authenticate(settings)(request, reply);
+      }
     }
   });