When parsing the URL returned from the OAuth provider, if it contains a query string followed by a fragment, the fragment is included in the last query parameter value. For example, the following URL https://test.com/redirect?response_type=code&state=123456#some_hash_value will be parsed as having the following query parameters:
response_type=code
state=123456#some_hash_value
Expected Behavior
The URL fragment should not be considered part of the query string, and the last query param value should not include the fragment. The URL fragment is distinct from the query string, and should be treated as such.
Library version:
OAuth Provider:
Affected Platform(s):
Current Behavior
When parsing the URL returned from the OAuth provider, if it contains a query string followed by a fragment, the fragment is included in the last query parameter value. For example, the following URL
https://test.com/redirect?response_type=code&state=123456#some_hash_valuewill be parsed as having the following query parameters:response_type=codestate=123456#some_hash_valueExpected Behavior
The URL fragment should not be considered part of the query string, and the last query param value should not include the fragment. The URL fragment is distinct from the query string, and should be treated as such.