fix(api): 🐛 Only decode URI, not full URI component, in application's redirect_url

2026-03-13 13:59:16 +01:00 · 2024-09-04 23:31:58 +02:00 · 2024-09-04 23:31:58 +02:00 · d63196b5ee
commit d63196b5ee
parent 53184bbe99
4 changed files with 6 additions and 11 deletions
--- a/api/oauth/token/index.ts
+++ b/api/oauth/token/index.ts
@ -112,10 +112,7 @@ export default apiRoute((app) =>
                        where: (token, { eq, and }) =>
                            and(
                                eq(token.code, code),
-                                eq(
-                                    token.redirectUri,
-                                    decodeURIComponent(redirect_uri),
-                                ),
+                                eq(token.redirectUri, decodeURI(redirect_uri)),
                                eq(token.clientId, client_id),
                            ),
                    });