cgauge / Flask-AWSCognito

Extension for Flask that adds support for AWSCognito into your application
https://flask-awscognito.readthedocs.io
MIT License
28 stars 28 forks source link

add injection of custom state (useful for internal redirects) #8

Open m4g005 opened 4 years ago

m4g005 commented 4 years ago

we can use the state parameter to internally redirect a user after login (e.g., they land on a site from a bookmark, but need to auth). This change keeps the md5 hash to help prevent CSRF attacks and is otherwise backwards compatible. Relevant unit tests updated to handle change.

babaMar commented 4 years ago

Hopefully someone with write access will merge it soon, I'm not longer a maintainer of this repository

m4g005 commented 4 years ago

@customergauge: Any thoughts?