node-oauth2-server icon indicating copy to clipboard operation
node-oauth2-server copied to clipboard

Duplicated parameters on authorize.

Open dgnin opened this issue 2 years ago • 0 comments

On the OAuth guide for The Authorization Response says the redirect has to be attached with an invalid_request error query string parameter when:

invalid_request – the request is missing a parameter, contains an invalid parameter, includes a parameter more than once, or is otherwise invalid.

The library throws a InvalidRequestError in the two first cases, but when I provide a request body with a duplicated parameter, which translates into a parameter with an array value, it doesn't throw any exception, and as far I understand it should.

dgnin avatar Dec 14 '23 14:12 dgnin