qugalet/gotosocial
1
0
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2024-12-22 18:22:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[chore] Enable S256 code challenge (#2224)

Browse source 
For some reason we only had plain enabled. This adds S256.
This commit is contained in:
Daenney 2023-09-28 11:21:19 +02:00 committed by GitHub
parent e93cc7a9a8
commit 2a9927dfdc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
internal/oauth/server.go
View file

@ -99,7 +99,10 @@ func New(ctx context.Context, database db.Basic) Server {
oauth2.AuthorizationCode,
oauth2.ClientCredentials,
},
AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{oauth2.CodeChallengePlain},
AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{
oauth2.CodeChallengePlain,
oauth2.CodeChallengeS256,
},
}
srv := server.NewServer(sc, manager)