search

lucia-auth / lucia

Authentication, simple and clean
https://lucia-auth.com
MIT License
8.32k stars 447 forks source link

fix(svelte): infinite loop #1602

Closed zmzlois closed 1 week ago

zmzlois commented 2 weeks ago

I was facing an infinite loop while having path :"." and state !== storedState.

I don't think this is safe but temporary solution for now

if anyone wants to check and do a repro: https://github.com/zmzlois/rail-svelte to see the behavior between different ones

pilcrowOnPaper commented 2 weeks ago

Like an infinite redirect loop? You HAVE TO compare the stored state and provided state. That's like the whole point of OAuth states