mirror of
https://github.com/transloadit/uppy.git
synced 2026-07-22 17:58:05 +00:00
* Enable CSRF protection in grant (OAuth2)
I've been doing some testing and from what I can see, this is already supported in https://github.com/simov/grant (which companion uses for OAuth2), when enabling the `state` parameter. It seems to be working and it is checking the parameter when redirected back from the provider:
|
||
|---|---|---|
| .. | ||
| __mocks__ | ||
| __tests__ | ||
| fixtures | ||
| output | ||
| resources | ||
| mockoauthstate.js | ||
| mockserver.js | ||
| mocksocket.js | ||