search

mozilla / PyFxA

Python library for interacting with the Firefox Accounts ecosystem
Other
30 stars 20 forks source link

OAuth client does not check "state" value #77

Closed enote-kane closed 4 years ago

enote-kane commented 4 years ago

In case of calling /authorization using code-challenge, the OAuth client does not check the state parameter in the redirect URL provided by the server.