Oauth2orizeRecipes

Oauth2orizeRecipes copied to clipboard

Wrong Issue Token Logic for Access+Refresh Token?

2

Hey, I stumbled across the following issue, where the application does not issue a refresh Token where it should. Have a look at the following part in validate.js: ``` /**...

felixfrtz

This broken Authorization Code flow, because you cannot keep client_secret credential safe in the client, so.. why in your demo example (authorization code) did you send in the body request...

elainegasca

Authorization Server - Dependency update

1

node modules update. passed all tests.

prionkor

The Demo Example should support Cross Domain

stanleyyuenyiu

Hello, I have it successfully installed, but by starting node app.js, I get this error message in the terminal: /authorization-server/utils.js:24 exports.createToken = ({ exp = 3600, sub = '' }...

petrk94

Hey, first of all: thanks for documenting this so detailed. I went through a few oauth examples, and this one is definitely the best one. Now to the issue I...

felixfrtz

How to protect webclient pages?

1

Hi, How would you protect your web-client index page? One has to login first before he can access it. How?

YannisMarios

https://localhost:3000/oauth/token 403 (Forbidden)

1

hi, i'm trying to integrate "authorization-server" to meteor but i get this after click "Submit Post" {"error":"invalid_grant","error_description":"Invalid authorization code"} ``` POST oauth/token HTTP/1.1 Host: https://localhost:3000 Content-Type: application/x-www-form-urlencoded code=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiI5ZGIxNjY2NS01ZjJmLTQxYzgtYmRmNy0wNzM5NzQxN2JmN2UiLCJzdWIiOiIxIiwiZXhwIjoxNDg3MjE5NzczLCJpYXQiOjE0ODcyMTk0NzN9.aUZQJGgeRSGRzEpQlDI_KZrt6sC7dd8HdxSSRBM9RQR1hkjOxWW6CLjs_c2rMhnauLSNMS68xzOUD8OlZJ5CEXuO93G1vG0CxbnNXlzqOACGzPHdcYY8ka_1vXBm5u-1vS7Y1hR2NoUo6IL5q3xyPKKU1nULhGQ3H4AvEcSJDggnexLGz5ccf4nOhWuJns3WKBqx9vxhG0gWMChz9IyF1EhJicdMnk4a-4mq77xAmAKez0h8E-Q9y7OYB6uroam6vovegfWvx2bDgRqWLDKMCxXJuxJQIBjXt6vMqh6sCXenT13jZalzVXqfQdyOE0inVkC5brFs0YGyvvL3blzomg& redirect_uri=https://localhost:3000& client_id=abc123&...

crapthings