stormpath-flask icon indicating copy to clipboard operation
stormpath-flask copied to clipboard

Add additional redirect check for google login

Open stauffec opened this issue 10 years ago • 1 comments

It looks like when logging into google, the recommended procedure for following the user to the "next" url is put that next parameter encoded in a "state" parameter that is passed to Google. Google then passes it back to you.

stauffec avatar May 25 '15 12:05 stauffec

Also, one thing I didn't update, which maybe makes sense for this change as well, is to update the google_login.html file to include the "next" url in the state param passed to google.

stauffec avatar May 27 '15 00:05 stauffec