Commits on May 11, 2020

1. fix: add state parameter for oauth2 …

   state parameter is recommended with oauth2 authentification
   to mitigate CSRF attacks (see [1]).
   hydra [2] will throw the following error message if state is
   missing:
   
     description="The state is missing or has less than 8 characters and is therefore considered too weak" error=invalid_state hint="Request
    parameter \"state\" must be at least be 8 characters long to ensure sufficient entropy."
   
   [1]: https://auth0.com/docs/protocols/oauth2/oauth-state
   [2]: https://www.ory.sh/hydra/
   
   Signed-off-by: Samuel Trégouët <samuel.tregouet@gmail.com>

   

   stregouet committed May 11, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for 6ff6d21
   • Browse repository at this point

   Copy the full SHA

   6ff6d21 View commit details

   Browse the repository at this point in the history