override response_type=id for IndieAuth providers

this avoids requesting an access token since we are just trying to authenticate, not trying to authorize. see https://indieauth.spec.indieweb.org/#authentication for details
vouch · Oct 9, 2018 · 75450fb · 75450fb
1 parent 4d29425
commit 75450fb
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/handlers/handlers.go b/handlers/handlers.go
@@ -107,6 +107,8 @@ func loginURL(r *http.Request, state string) string {
 			}
 		}
 		url = oauthclient.AuthCodeURL(state, oauthopts)
+	} else if genOauth.Provider == "indieauth" {
+		url = oauthclient.AuthCodeURL(state, oauth2.SetAuthURLParam("response_type", "id"))
 	} else {
 		url = oauthclient.AuthCodeURL(state)
 	}