Validate args when checking authorisation code
Open
@almirbi is already working on this.
Since Sep 5, 2017.
Bug
- Dominant language
- PHP
- Stars
- 175
- Forks
- 45
- Avg merge
- 17h 8m
- Merged PRs (30d)
- 4
Description
Tokens\Authorization_Code::validate takes an $args parameter, but we a) don't pass any data in, and b) don't do anything with it. 🙃
Per the spec, we need to validate redirect_uri matched what was passed with the original authorisation request.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.