mirrors/gotosocial
1
0
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2025-10-31 22:52:25 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

[feature] add 'state' oauth2 param to /oauth/authorize (#730)

Browse source
This commit is contained in:
tobi 2022-07-28 16:43:27 +02:00 • committed by GitHub
commit 8106b69856
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 35 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

4
internal/api/model/oauth.go
View file

@ -33,4 +33,8 @@ type OAuthAuthorize struct {
// List of requested OAuth scopes, separated by spaces (or by pluses, if using query parameters).
// Must be a subset of scopes declared during app registration. If not provided, defaults to read.
Scope string `form:"scope" json:"scope"`
// State is used by the application to store request-specific data and/or prevent CSRF attacks.
// The authorization server must return the unmodified state value back to the application.
// See https://www.oauth.com/oauth2-servers/authorization/the-authorization-request/
State string `form:"state" json:"state"`
}