Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Skip dropping request on code request parameter #529

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Skip dropping request on code request parameter #529

wants to merge 1 commit into from

Commits on Nov 5, 2024

  1. Skip dropping request on code request parameter 

    By default if someone makes a GET /?code= as request parameter `&code=...` error `request to the redirect_uri path but there's no session state found` will be raised. 

I believe that it's related to 

```
local function openidc_get_path(uri)
  local without_query = uri:match("(.-)%?") or uri
  return without_query:match(".-//[^/]+(/.*)") or without_query
end
```

Where basically &code matches the regex which triggers authorization response from OP. 

`&code=` alone without extra request parameter  should be treated as authorization response ? 

Eventough I don't believe that this is a viable solution
    @ricristian
    ricristian authored Nov 5, 2024
    Configuration menu
    Copy the full SHA
    19f3f79 View commit details
    Browse the repository at this point in the history