passport-oauth2

passport-oauth2 copied to clipboard

Bump `oauth` from 0.9.x to 0.10.x

3

This is solving issues of `passport-google-oauth2` as stated in issue [#163](https://github.com/jaredhanson/passport-oauth2/issues/163)

Quentin-Danjou

`node-oauth` throws intermittent InternalOAuthErrors on fast connections

2

Hi all, there's an existing bug with [`passport-google-oauth2`](https://github.com/jaredhanson/passport-google-oauth2) where, due to an upstream issue in `node-oauth` 0.9.0, OAuthing into Google accounts fails intermittently over fast connections. Good news! The upstream...

8bitDesigner

this library is "insecure" to CSRF by default, security mechanisms confusing to use and enable

8

Our security team flagged that we were missing CSRF protection, which was surprising because we chose a open source library that is widely used, assuming that it would be secure...

joshribakoff-sm

state query parameter drops out in v1.4.0 (used to work in v1.3.0)

3

The microservice that I am working on started failing during the oauth handshake because the `state` query parameter gets lost in the pipeline. I noticed some changes in the params...

hwangbible

v1.5+ Breaks OAuth2Strategy callback

3

After upgrading all modules I found out that OAuth2Strategy callback just did't fire. I've created this issue at [StackOverflow]( https://stackoverflow.com/questions/70946029/passport-js-oauth2strategy-doest-fire-callback ) After downgrading to 1.5.0 from 1.6.1 the problem is...

Number16BusShelter

Does PKCE i.e. options state: true the use as a serverless server?

1

I am using this passport strategy on a serverless platform with the authentication code flow, and to improve security I was considering using the PKCE flow extension. As several issues...

Superlokkus

Redirect without URL Encode

1

Hello! I'm having a problem with the scope parameter because of the url encode in the redirect of the authorization url. Is there any way to avoid the url encode...

obeltranss

Hi, I keep getting this error traced from passport-oauth2. > TokenError: Invalid "code" in request. I'm not sure why this problem is occurring, since it successfully logged me in. If...

KingCh1ll

Unknown authentication strategy "oauth2"

2

Somebody help, I try config router middaleware, but respone: 

buiquocdatgl

Profile info of user empty

12

I am connecting my node app to Microsoft Outlook using passport-oauth2 where I am experiencing some major error where it asks for permissions from the user and take me to...

codeeverystory