How should you handle Origin = 'null' after redirect?

[CobraFlow]

In my case, I am using a JASGI CAS SSO server.

My application redirects to the CAS server to login and then returns to my application on success.

The redirect hits the CAS server with an 'Origin' header of 'null'. The Origin header exists with a value of 'null'. This is different to a missing Origin header!

The only code that needs changing is the isValidOrigin() where an origin of 'null' should return true.

if("null".equals(origin)) return true;

Is this the correct solution or are there more issues hiding behind the scenes?