flask-micropub

flask-micropub copied to clipboard

change default auth url

3

https://github.com/kylewm/flask-micropub/blob/897c75848c441758d61c11e36c02ae9c1f786950/flask_micropub.py#L24 Change too `DEFAULT_AUTH_URL = 'https://indielogin.com/auth'` as indieauth.com is [being deprecated](https://indieweb.org/IndieAuth#naming_confusion).

argovaerts

Looking into https://github.com/kylewm/woodwind/issues/71, it seems like flask-micropub is the source of this bug. https://github.com/kylewm/flask-micropub/blob/794d95c624b9b3e05c7f19881b3d91f7bf73cd2e/flask_micropub.py#L304 does not resolve relative links to absolute ones, and does not look for `` tags.

sknebel

CSRF protection using state parameter

1

we need to protect against malicious redirects by adding a verifiable signature to the state parameter (in addition to the app-supplied next_url). TODO understand this better. http://tools.ietf.org/html/rfc6749#section-10.12 http://www.twobotechnologies.com/blog/2014/02/importance-of-state-in-oauth2.html

karadaisy

Should default to http://

karadaisy