mirror of
https://github.com/elyby/oauth2-server.git
synced 2025-05-31 14:12:07 +05:30
Ensure state is in access denied redirect. Fixes #597
This commit is contained in:
@ -335,7 +335,12 @@ class AuthCodeGrant extends AbstractAuthorizeGrant
|
|||||||
// The user denied the client, redirect them back with an error
|
// The user denied the client, redirect them back with an error
|
||||||
throw OAuthServerException::accessDenied(
|
throw OAuthServerException::accessDenied(
|
||||||
'The user denied the request',
|
'The user denied the request',
|
||||||
$finalRedirectUri
|
$this->makeRedirectUri(
|
||||||
|
$finalRedirectUri,
|
||||||
|
[
|
||||||
|
'state' => $authorizationRequest->getState(),
|
||||||
|
]
|
||||||
|
)
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -207,7 +207,12 @@ class ImplicitGrant extends AbstractAuthorizeGrant
|
|||||||
// The user denied the client, redirect them back with an error
|
// The user denied the client, redirect them back with an error
|
||||||
throw OAuthServerException::accessDenied(
|
throw OAuthServerException::accessDenied(
|
||||||
'The user denied the request',
|
'The user denied the request',
|
||||||
$finalRedirectUri
|
$this->makeRedirectUri(
|
||||||
|
$finalRedirectUri,
|
||||||
|
[
|
||||||
|
'state' => $authorizationRequest->getState(),
|
||||||
|
]
|
||||||
|
)
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user