search

isaacsanders / omniauth-stripe-connect

Stripe Connect OAuth2 Strategy for OmniAuth 1.0
MIT License
130 stars 75 forks source link

redirect_uri - Stripe API changes. #13

Closed chrischattin closed 11 years ago

chrischattin commented 11 years ago

Received this email below from support@stripe.com.

I removed the redirect_uri from the request_phase method on my fork but am unsure if this will break other OAuth stuff.

Feel free to ignore this if it is not applicable.

Hello,

Just a heads up that we're making a change to Stripe Connect that may affect your application.

It looks like your Stripe Connect integration is sending a redirect_uri parameter to the Connect authorize endpoint (https://connect.stripe.com/oauth/authorize). This currently is not a valid parameter.

We'll soon be adding redirect_uri functionality to Stripe Connect. The parameter value you are sending won't pass validation and would break your current integration. We currently just ignore it but are now deprecating this behavior.

The easiest thing to do to make sure that your application won't be affected is to remove redirect_uri from your request to the Stripe Connect authorize endpoint. We will start returning an error on invalid redirect_uri parameters in 30 days (September 30, 2013).

If you have any questions, please feel free to reply back and I'll be happy to help.

Thanks, Andrew

chrischattin commented 11 years ago

Disregard. Turns out the request_uri is still a valid parameter. I misunderstood the email.