mirrors
/
gotosocial
mirror of
1
Fork 0
Code Issues Releases Activity

[chore] Enable S256 code challenge (#2224) 

For some reason we only had plain enabled. This adds S256.
This commit is contained in:
Daenney 2023-09-28 11:21:19 +02:00 committed by GitHub
parent e93cc7a9a8
commit 2a9927dfdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
internal/oauth/server.go
View File

@ -99,7 +99,10 @@ func New(ctx context.Context, database db.Basic) Server {
oauth2.AuthorizationCode, oauth2.AuthorizationCode,
oauth2.ClientCredentials, oauth2.ClientCredentials,
}, },
AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{oauth2.CodeChallengePlain}, AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{
oauth2.CodeChallengePlain,
oauth2.CodeChallengeS256,
},
} }
srv := server.NewServer(sc, manager) srv := server.NewServer(sc, manager)