mirrors/gotosocial
1
0
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2025-10-30 13:42:24 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

[feature] Implement /oauth/revoke for token revocation (#3983)

Browse source
This commit is contained in:
tobi 2025-04-10 16:24:17 +02:00 • committed by GitHub
commit e032c959e1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
8 changed files with 522 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
internal/api/auth/auth.go
View file

@ -46,6 +46,7 @@ const (
OauthFinalizePath = "/finalize"
OauthOOBTokenPath = "/oob" // #nosec G101 else we get a hardcoded credentials warning
OauthTokenPath = "/token" // #nosec G101 else we get a hardcoded credentials warning
OauthRevokePath = "/revoke"
/*
params / session keys
@ -100,6 +101,7 @@ func (m *Module) RouteAuth(attachHandler func(method string, path string, f ...g
// RouteOAuth routes all paths that should have an 'oauth' prefix
func (m *Module) RouteOAuth(attachHandler func(method string, path string, f ...gin.HandlerFunc) gin.IRoutes) {
attachHandler(http.MethodPost, OauthTokenPath, m.TokenPOSTHandler)
attachHandler(http.MethodPost, OauthRevokePath, m.TokenRevokePOSTHandler)
attachHandler(http.MethodGet, OauthAuthorizePath, m.AuthorizeGETHandler)
attachHandler(http.MethodPost, OauthAuthorizePath, m.AuthorizePOSTHandler)
attachHandler(http.MethodPost, OauthFinalizePath, m.FinalizePOSTHandler)