From aa232de426dbc1b84f79d1e65afed6b500488e1f Mon Sep 17 00:00:00 2001 From: szczepad Date: Mon, 22 Aug 2022 09:19:09 +0200 Subject: [PATCH] fix: Uses whitespace as seperator for oauth scopes in state-string This is necessary, as the previous delimiter (,) was being redacted after a redirect. This resulted in the scopes not being correctly parseable and the state not being fetched correctly after the oauth-callback --- server/handlers/oauth_login.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/handlers/oauth_login.go b/server/handlers/oauth_login.go index c2aa494..8312cdd 100644 --- a/server/handlers/oauth_login.go +++ b/server/handlers/oauth_login.go @@ -95,7 +95,7 @@ func OAuthLoginHandler() gin.HandlerFunc { } - oauthStateString := state + "___" + redirectURI + "___" + roles + "___" + strings.Join(scope, ",") + oauthStateString := state + "___" + redirectURI + "___" + roles + "___" + strings.Join(scope, " ") provider := c.Param("oauth_provider") isProviderConfigured := true