jonny/jonnybarnes.uk
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases 5 Packages Wiki Activity Actions

Parse scope value from authorization URL correctly

Browse source
This commit is contained in:
Jonny Barnes 2024-06-22 20:48:03 +01:00
parent de3661ab77
commit 1521130f55
Signed by: jonny
SSH key fingerprint: SHA256:CTuSlns5U7qlD9jqHvtnVmfYV3Zwl2Z7WnJ4/dqOaL8
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/Http/Controllers/IndieAuthController.php
View file

@ -71,7 +71,7 @@ class IndieAuthController extends Controller
return view('indieauth.error')->withErrors(['redirect_uri' => 'redirect_uri is not valid for this client_id']); return view('indieauth.error')->withErrors(['redirect_uri' => 'redirect_uri is not valid for this client_id']);
} }
$scopes = $request->get('scopes', ''); $scopes = $request->get('scope', '');
$scopes = explode(' ', $scopes); $scopes = explode(' ', $scopes);
return view('indieauth.start', [ return view('indieauth.start', [
@ -130,8 +130,6 @@ class IndieAuthController extends Controller
* This is one possible second step in the IndieAuth flow, where the client app sends the auth code to the IndieAuth * This is one possible second step in the IndieAuth flow, where the client app sends the auth code to the IndieAuth
* endpoint. As it is to the auth endpoint we return profile information. A similar request can be made to the token * endpoint. As it is to the auth endpoint we return profile information. A similar request can be made to the token
* endpoint to get an access token. * endpoint to get an access token.
*
* @throws SodiumException
*/ */
public function processCodeExchange(Request $request): JsonResponse public function processCodeExchange(Request $request): JsonResponse
{ {
@ -227,6 +225,9 @@ class IndieAuthController extends Controller
return in_array($redirectUri, $redirectUris, true); return in_array($redirectUri, $redirectUris, true);
} }
/**
* @throws SodiumException
*/
protected function validateAuthorizationCode(Request $request): JsonResponse|array protected function validateAuthorizationCode(Request $request): JsonResponse|array
{ {
// First check all the data is present // First check all the data is present