keyring icon indicating copy to clipboard operation
keyring copied to clipboard

OAuth2: add flag to hash token request parameters into `state`

Open creativecoder opened this issue 5 years ago • 0 comments

We're seeing more services implement strict url matching with the redirect URI during an OAuth 2.0 authentication flow.

Rather than doing this ad-hoc for each service, it would be more efficient to be able to opt in to this for any Oauth2 connection.

Idea from @pablinos

As using only the state parameter is the OAuth standard, I'm wondering if we should add the filter to Keyring_Service_OAuth2 if a flag is set ($this->pack_state = true in the constructor perhaps?), and then slowly convert the services.

creativecoder avatar Oct 20 '20 19:10 creativecoder