jonny/jonnybarnes.uk
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases 5 Packages Wiki Activity Actions

Merge pull request #1444 from jonnybarnes/1443-scopes-arent-being-shown-correctly-in-indieauth-approve-page

Browse source 
Parse scope value from authorization URL correctly
This commit is contained in:
Jonny Barnes 2024-06-22 20:51:17 +01:00 • committed by GitHub
commit cabc9fef84
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/Http/Controllers/IndieAuthController.php
View file

@ -71,7 +71,7 @@ class IndieAuthController extends Controller
return view('indieauth.error')->withErrors(['redirect_uri' => 'redirect_uri is not valid for this client_id']);
}
$scopes = $request->get('scopes', '');
$scopes = $request->get('scope', '');
$scopes = explode(' ', $scopes);
return view('indieauth.start', [
@ -130,8 +130,6 @@ class IndieAuthController extends Controller
* This is one possible second step in the IndieAuth flow, where the client app sends the auth code to the IndieAuth
* endpoint. As it is to the auth endpoint we return profile information. A similar request can be made to the token
* endpoint to get an access token.
*
* @throws SodiumException
*/
public function processCodeExchange(Request $request): JsonResponse
{
@ -227,6 +225,9 @@ class IndieAuthController extends Controller
return in_array($redirectUri, $redirectUris, true);
}
/**
* @throws SodiumException
*/
protected function validateAuthorizationCode(Request $request): JsonResponse|array
{
// First check all the data is present