stereo.cat/backend
2
0
Fork 0
Code Issues 3 Pull requests Projects Releases Packages Wiki Activity Actions

Secure oauth flow (state parameter) #4

New issue
Open
opened 2025-05-10 17:00:17 +00:00 by hex · 1 comment
hex commented 2025-05-10 17:00:17 +00:00
Owner
Copy link
No description provided.
hex added the
TODO
Priority: HIGH
 labels 2025-05-10 17:00:17 +00:00
hex commented 2025-06-20 20:27:49 +00:00
Author
Owner
Copy link

See https://discord.com/developers/docs/topics/oauth2#state-and-security

Currently we do not use the state parameter at ALL. We must randomly generate one when the user calls /api/login alongside the oauth2 url and check it in /api/auth/callback

See https://discord.com/developers/docs/topics/oauth2#state-and-security Currently we do not use the state parameter at ALL. We must randomly generate one when the user calls /api/login alongside the oauth2 url and check it in /api/auth/callback
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
fix-file-serving
auth-uploads
authentication
file-serving
uploading
No results found.
Labels
Clear labels   
Priority: HIGH

Priority: HIGH

  
TODO

Issue label for things that need to be added or fixed.

No labels
Priority: HIGH
TODO
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: stereo.cat/backend#4
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?