Security fix for FriendsOfSymfony/oauth2-php

FriendsOfSymfony / FOSOAuthServerBundle

A server side OAuth2 Bundle for Symfony

1.09k stars 451 forks source link

Closed DeChaun closed 3 years ago

DeChaun commented 4 years ago

Hi there

FriendsOfSymfony/oauth2-php has released a minor update to fix a security issue.

Am I right to suggest this bundle should update its composer requirements for the oauth2-php bundle to version 1.3.0?

Thanks in advance!

fliespl commented 3 years ago

@DeChaun From what I see - it's not really a security fix, but simply a bug fix.

It failed to allow redirectUri under certain scenario, but it should (not the other way around - that's why it's not security fix).

deguif commented 3 years ago

Let's close now it was released