rollupid
rollupid copied to clipboard
fix(passport): redirect URL parameter is not checked
Description
The redirect_uri parameter of the /authorize endpoint is not matched against
the registered redirect URL.
Steps to Reproduce
- [First Step]
- [Second Step]
- [and so on...]
Expected Behavior
The requests to /authorize endpoint fail if the redirect_uri parameter is
not an exact match of the registered redirect URL.
Actual Behavior
The redirect_uri parameter is directly used.