gcg/static-cms
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: pass auth type in authURL to be used in identity widget (#2920)

Browse Source
This commit is contained in:
Erez Rokah
2019-12-02 18:52:12 +02:00
committed by Shawn Erquhart
parent 7391061b3b
commit 87b4d0f765
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
packages/netlify-cms-lib-auth/src/implicit-oauth.js
View File

@ -41,7 +41,9 @@ export default class ImplicitAuthenticator {
authURL.searchParams.set('redirect_uri', document.location.origin + document.location.pathname);
authURL.searchParams.set('response_type', 'token');
authURL.searchParams.set('scope', options.scope);
authURL.searchParams.set('state', createNonce());
const state = JSON.stringify({ auth_type: 'implicit', nonce: createNonce() });
authURL.searchParams.set('state', state);
document.location.assign(authURL.href);
}
@ -59,7 +61,8 @@ export default class ImplicitAuthenticator {
const params = Map(hashParams.entries());
const validNonce = validateNonce(params.get('state'));
const { nonce } = JSON.parse(params.get('state'));
const validNonce = validateNonce(nonce);
if (!validNonce) {
return cb(new Error('Invalid nonce'));
}