thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server
https://oauth2.thephpleague.com
MIT License
6.51k stars 1.12k forks source link

any way to customize redirect uri validator? #1264

Closed yunwuxin closed 2 years ago

yunwuxin commented 2 years ago

https://github.com/thephpleague/oauth2-server/blob/19dc5e47c465bc9f1804859660b7efe456a40713/src/Grant/AbstractGrant.php#L282-L292

Sephster commented 2 years ago

Not at the moment. We haven't opened this up, primarily because the way it functions is specified in the OAuth 2 specs and we try to be spec compliant. Is there something you can't do with the current set up?

yunwuxin commented 2 years ago

In my project, i only want to check domain name only,not the whole redirect uri

Sephster commented 2 years ago

The library used to work in this way but we changed it to better comply with OAuth 2 standards as partial matching is a security risk. For that reason, we won't be opening this up for editing sorry.