mastodon / flodgatt

A blazingly fast drop-in replacement for the Mastodon streaming API server
GNU Affero General Public License v3.0
86 stars 8 forks source link

Improve security to match Node.js version #20

Closed codesections closed 5 years ago

codesections commented 5 years ago

We need to update the Oauth flow to match the improvements made in https://github.com/tootsuite/mastodon/pull/10818

This updates the access control flow to keep sensitive information out of the query string (which protects against situations where the query string is recorded/logged)