openid / AppAuth-JS

JavaScript client SDK for communicating with OAuth 2.0 and OpenID Connect providers.
Apache License 2.0
975 stars 162 forks source link

Javascript Implemantation:Code still visible in the address bar after redirection #202

Closed samanthaburboz closed 2 years ago

samanthaburboz commented 2 years ago

Expected Behavior

After the user authorized he should be redirected to the home page and the code should not be visible in the address bar

localhost:9000/

Describe the problem

We are trying to implement AppAuthJs in a plain Javascript and facing the following issue

[REQUIRED] Actual Behavior

localhost:9000/callback?code=bKyHjsQ-yJXwW8cOrya4Zr3eAQGKnugfdOlXjdlzRJ4&state=G7ZBLaGxYD

Also can you please provide a example for plain Javascript implementation.

[REQUIRED] Steps to reproduce the behavior

[REQUIRED] Environment

tikurahul commented 2 years ago

This is something you can control on your end. This is got nothing to do with the library itself.