versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2025-12-06 16:38:19 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(api): 🐛 Correctly decode URI component when obtaining token.

Browse source 
Prevents redirect_uri mismatch by normalizing URL encoding
This commit is contained in:
Jesse Wierzbinski 2024-09-04 23:11:16 +02:00
parent 9dc143060f
commit 7f8ade5fc1
No known key found for this signature in database
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
api/oauth/token/index.ts
View file

@ -112,7 +112,10 @@ export default apiRoute((app) =>
where: (token, { eq, and }) => where: (token, { eq, and }) =>
and( and(
eq(token.code, code), eq(token.code, code),
eq(token.redirectUri, redirect_uri), eq(
token.redirectUri,
decodeURIComponent(redirect_uri),
),
eq(token.clientId, client_id), eq(token.clientId, client_id),
), ),
}); });