WebLogin.pm: Fixed missing initial freeze of devices for hidden field

diff --git a/perl/lib/WebLogin.pm b/perl/lib/WebLogin.pm
index 9969f0054fad438cf8942af95d99157829787511..28393b0cc9b395ecbd4df841b0f8a9a3b3cc7fd2 100644 (file)
--- a/perl/lib/WebLogin.pm
+++ b/perl/lib/WebLogin.pm
@@ -1042,7 +1042,8 @@ sub print_multifactor_page {
     }
 
     # Add the devices, or restore from an earlier send.  Since the devices
-    # are a complicated datastructure, we save a cached bit there.
+    # are a complicated datastructure, we save a string version for future
+    # iterations of this page.
     $params->{default_device} = $self->{response}->default_device
         || $q->param('default_device');
     $params->{default_factor} = $self->{response}->default_factor
@@ -1050,7 +1051,9 @@ sub print_multifactor_page {
     if ($q->param('devices_cache')) {
         ($params->{devices}) = thaw($q->param('devices_cache'));
     } else {
-        $params->{devices} = $self->{response}->devices;
+        my $devices              = $self->{response}->devices;
+        $params->{devices}       = $devices;
+        $params->{devices_cache} = freeze($devices);
     }
 
     # Create the login_state object for use in templates