search

zorn-v / nextcloud-social-login

GNU Affero General Public License v3.0
198 stars 137 forks source link

RedirectUri and state parameter #334

Closed EvilBMP closed 2 years ago

EvilBMP commented 2 years ago

Hi I just updated an older instance where I had a working Custom OAuth2 profile. I updated to NC 23 with the latest sociallogin plugin version and now my primary system complaints about the wrong redirect uri. So I checked it and I saw, that since v4? the scope parameter is appended, even if empty and that there is a new state parameter with a changing value. Because of this the OAuth Server always aborts the login process because of the mismatching redirect uri.

What's the state parameter for?

zorn-v commented 2 years ago

Check "http" and "https" mismatch. Look at address bar of browser for actual url. If someone say about "the wrong redirect uri" check it. And you get that you have wrong redirect url in your app.

zorn-v commented 2 years ago

https://github.com/zorn-v/nextcloud-social-login#about-callbackreply-url