redirects should be HTTP/302

webmails/roundcube/login/mailu.php

@@ -28,7 +28,7 @@ class mailu extends rcube_plugin
         header('HTTP/1.0 403 Forbidden');
         print('mailu sso failure');
       } else {
-        header('Location: sso.php');
+        header('Location: sso.php', 302);
       }
       exit();
     }
@@ -47,19 +47,19 @@ class mailu extends rcube_plugin
   {
     $this->load_config();
     $sso_logout_url = rcmail::get_instance()->config->get('sso_logout_url');
-    header('Location: ' . $sso_logout_url, true);
+    header('Location: ' . $sso_logout_url, true, 302);
     exit();
   }
 
   function login($args)
   {
-    header('Location: index.php');
+    header('Location: index.php', 302);
     exit();
   }
 
   function login_failed($args)
   {
-    header('Location: sso.php');
+    header('Location: sso.php', 302);
     exit();
   }
 

webmails/snappymail/login/sso.php

@@ -9,9 +9,9 @@ if (isset($_SERVER['HTTP_X_REMOTE_USER']) && isset($_SERVER['HTTP_X_REMOTE_USER_
 	$ssoHash = \RainLoop\Api::CreateUserSsoHash($email, $password);
 
 	// redirect to webmail sso url
-	header('Location: index.php?sso&hash='.$ssoHash);
+	header('Location: index.php?sso&hash='.$ssoHash, 302);
 }
 else {
-	header('HTTP/1.0 403 Forbidden');
+	header('HTTP/1.0 403 Forbidden', 403);
 }
 ?>