Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ouath: /oauth/authorize endpoint doesn't sends state paramter to login page #2678

Closed
komalsukhani opened this issue Nov 20, 2019 · 0 comments · Fixed by #2732
Closed

Ouath: /oauth/authorize endpoint doesn't sends state paramter to login page #2678

komalsukhani opened this issue Nov 20, 2019 · 0 comments · Fixed by #2732

Comments

@komalsukhani
Copy link
Contributor

Branch/Environment/Version
master

Describe the bug
/oauth/authorize endpoint doesn't sends state parameter while redirecting to Login page

Reproduction steps

  1. Import TykDefinition.txt
  2. Create Oauth client for above API
  3. Send below curl request

curl -v "http://tyk-gateway:8181/test/oauth/authorize?response_type=code&client_id={CLIENT_ID}&redirect_uri=http://httpbin.org&state=94290ea6-4d3d-4e98-be36-4c9aaed916d8"

Note: Replace CLIENT_ID with one generated in Step 2

You will notice that while redirecting to login page state parameter is not sent.

Expected behavior
state parameter should have been sent to login page

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants