[DMCA Violation] Incorrect author attribution in commit 35eb321 #2432
Description
Checklist
- The issue can be reproduced in the nextjs-auth0 sample app (or N/A).
- I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
- I have looked into the API documentation and have not found a suitable solution or answer.
- I have searched the issues and have not found a suitable solution or answer.
- I have searched the Auth0 Community forums and have not found a suitable solution or answer.
- I agree to the terms within the Auth0 Code of Conduct.
Description
The changes committed via 35eb321 have been incorrectly attributed to Simen A. W. Olsen.
The actual author is Joshua Rogers, who originally submitted these changes via PR #2381.
It appears the original PR was closed by tusharpandey13, and PR #2413 was subsequently created using the source code without preserving the original authorship metadata.
Section 1202 of the DMCA prohibits the falsification, alteration, or removal of Copyright Management Information (CMI)
CMI is defined broadly to include the name of the author, the copyright owner, and the terms and conditions for use of the work, when conveyed in connection with the work.
Courts recognize that metadata embedded in digital files - specifically Git Author Name and Email fields - constitutes CMI as it identifies the author and facilitates licensing.
Therefore, stripping or altering this metadata violates Section 1202. Distributing the source code in its current state exposes this repository to potential DMCA takedowns and places users of the library in a position of legal uncertainty.
Required Resolution To rectify this compliance issue, please take one of the following actions:
- Revert PR fix: prevent OAuth parameter injection via returnTo (#2381) #2413 and merge PR fix(app-router): encode returnTo in login redirect to prevent OAuth param injection #2381 properly
- Amend the commit and force-push with the correct authorship
Reproduction
View commit 35eb321
Additional context
No response
nextjs-auth0 version
4.13.1
Next.js version
n/a
Node.js version
n/a