Mikael Finstad d6d940c6b2 Enable CSRF protection in grant (OAuth2) (#5504) ... * Enable CSRF protection in grant (OAuth2) I've been doing some testing and from what I can see, this is already supported in https://github.com/simov/grant (which companion uses for OAuth2), when enabling the `state` parameter. It seems to be working and it is checking the parameter when redirected back from the provider: 61fe48a8da/lib/flow/oauth2.js (L72So) * fix test		2024-11-11 10:03:26 +01:00
..
callback.js	Improve error message when window.opener == null (#5340)	2024-07-15 16:23:42 +02:00
companion.js	@uppy/google-photos: add plugin (#5265)	2024-06-19 14:48:45 +02:00
cors.js	@uppy/companion: remove unused headers (#5198)	2024-05-30 17:22:48 +02:00
credentials.js	@uppy/companion: implement refresh for authentication tokens (#4448)	2023-06-22 11:18:48 +02:00
deauthorization.js	Companion: rewrite request and purest to got (#3953)	2022-08-16 18:44:04 +07:00
header-blacklist.js	meta: fix all ESLint warnings and turn them into errors (#4398)	2023-04-04 15:54:13 +02:00
http-agent.js	@uppy/companion: invert some internal boolean options (#5198)	2024-05-30 17:22:49 +02:00
logger.js	@uppy/companion: remove chalk from dependencies (#5178)	2024-05-22 13:58:02 +02:00
preauth.js	@uppy/companion: implement refresh for authentication tokens (#4448)	2023-06-22 11:18:48 +02:00
provider-manager.js	Enable CSRF protection in grant (OAuth2) (#5504)	2024-11-11 10:03:26 +01:00
providers.js	@uppy/companion: implement facebook app secret proof (#5249)	2024-06-27 17:30:33 +02:00
subpath.js	remove deprecated duplicated metrics (#3833)	2022-06-27 10:07:15 -07:00
uploader.js	@uppy/companion: remove oauthOrigin (#5311)	2024-07-09 12:00:51 +02:00
url.js	meta: fix all ESLint warnings and turn them into errors (#4398)	2023-04-04 15:54:13 +02:00