search

raucao / sharesome

Share files quickly from your remote storage
https://sharesome.5apps.com
23 stars 5 forks source link

uses multiple redirect_uris #39

Closed ghost closed 8 years ago

ghost commented 8 years ago

I noticed that multiple redirect URIs are used by sharesome, depending on the URL you are visiting. If you try to login while on the 'history' page it will use that as a redirect_uri, it should use state for that. Now I have the app listed twice ;)

screenshot from 2015-10-27 21-00-06

raucao commented 8 years ago

I disagree. I'm using a proper router, so the redirect URI makes more sense to me here.

Hint: for 5apps Storage, we use the origin as the client ID and apply the given redirect URI to every auth as long as its origin/host is the same as what we stored. The Web Platform (client-side) security model uses the origin, not specific URLs, as differentiator for site/app identity.