Skip to content

Commit

Permalink
Add :credentials to omniauth exceptions
Browse files Browse the repository at this point in the history
  • Loading branch information
emirisman committed Mar 22, 2020
1 parent d5b0dc7 commit c536019
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion app/controllers/users/omniauth_callbacks_controller.rb
Expand Up @@ -9,7 +9,7 @@ def all
sign_in_and_redirect @user, :event => :authentication, :method => :post
set_flash_message(:notice, :success, :kind => t(action_name, scope: 'devise.links')) if is_navigational_format?
else
session['devise.'+action_name+'_data'] = request.env['omniauth.auth'].except(:extra) # Removing extra as it can overflow some session stores
session['devise.'+action_name+'_data'] = request.env['omniauth.auth'].except(:extra, :credentials) # Removing extra and credentials as it can overflow some session stores
redirect_to root_path, alert: @user.errors.full_messages.join("\n")
end
end
Expand Down

0 comments on commit c536019

Please sign in to comment.