iTwin / auth-clients

MIT License
6 stars 3 forks source link

[electron] loopback server should only listen on exact redirect_uri address #248

Closed ben-polinsky closed 3 months ago

ben-polinsky commented 3 months ago

Previously, we only provided a port when starting our LoopbackServer, which then listened on the given port across all local interfaces.

Now, we'll only listen on the exact address from the redirect_uri provided by the user.

h/t to @fjch1997