lepture / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.
https://authlib.org/
BSD 3-Clause "New" or "Revised" License
4.49k stars 448 forks source link

Fix: use unique variable name when clearing old state data #661

Closed jdeepee closed 1 month ago

jdeepee commented 1 month ago

What kind of change does this PR introduce? (check at least one)

Does this PR introduce a breaking change? (check one)



Fixes issue where state data for OAuth could be set on an incorrect session key due to overwriting the key value when removing old session state data.