-
Notifications
You must be signed in to change notification settings - Fork 819
Fixed Form UrlEncoded OAuth Lib Core #1382
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
oauth2_provider/oauth2_backends.py
Outdated
| # if request.content_type in ['multipart/form-data', 'application/x-www-form-urlencoded']: | ||
| if request.content_type in ["application/x-www-form-urlencoded"]: | ||
| query_string = base64.b64decode(request.body).decode("utf-8") | ||
| query_params = {p.split("=")[0]: p.split("=")[1] for p in query_string.split("&")} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There's a safer way to do this
Codecov ReportAttention:
Additional details and impacted files@@ Coverage Diff @@
## master #1382 +/- ##
==========================================
- Coverage 97.56% 97.15% -0.41%
==========================================
Files 32 32
Lines 2132 2143 +11
==========================================
+ Hits 2080 2082 +2
- Misses 52 61 +9 ☔ View full report in Codecov by Sentry. |
for more information, see https://pre-commit.ci
for more information, see https://pre-commit.ci
|
@ferrants thanks for opening the PR. We really need a test demonstrating the error and testing the fix. There are also the remainiing itms on the check list. Do you have time to complete this work? |
|
This was two years ago. I don't recall. Close if you want, I don't care |
|
Thanks for getting back to me. I'll close it. |
Fixes #296
Description of the Change
Adds another Oauth Lib Core that isn't broken for base64 encoded form submissions.
Checklist
CHANGELOG.mdupdated (only for user relevant changes)AUTHORS