-
-
Notifications
You must be signed in to change notification settings - Fork 490
445 confirm redirect #566
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
445 confirm redirect #566
Conversation
@@ -237,7 +237,6 @@ def test_unauthorized_client(self): | |||
|
|||
def test_access_denied(self): | |||
self.validator.authenticate_client.side_effect = self.set_client | |||
self.validator.confirm_redirect_uri.return_value = False |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't fully understand how this test is now passing without this line? Wasn't that line the purpose of the test?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In the new flow, confirm_redirect_uri
is not called because no redirect_uri
is present in the request and get_default_redirect_uri
return None.
But you are right that I replaced an initial intent with another use-case which didn't exist initially.
Let me fix that
@@ -420,6 +420,17 @@ def validate_token_request(self, request): | |||
# REQUIRED, if the "redirect_uri" parameter was included in the | |||
# authorization request as described in Section 4.1.1, and their | |||
# values MUST be identical. | |||
if request.redirect_uri is None: | |||
request.using_default_redirect_uri = True |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this variable used somewhere?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't know. I was wondering it could be used in the Validator implementation. However, since it's not documented, maybe nobody care !
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see, looks good then 👍
@skion : I have updated the changes, please feel free to review again and tell me :-) |
See #445 for discussion