dokuwiki-plugin-oauth icon indicating copy to clipboard operation
dokuwiki-plugin-oauth copied to clipboard
verified publisher icon cosmocode

Missing CSRF protection

Open xi opened this issue 11 months ago • 0 comments

Issue Description

OAuth 2.1 requires that there is CSRF protection by using state, nonce, code_challenge, or a combination of those. It recommends to use at least code_challenge.

xi avatar Jan 07 '25 14:01 xi