-
-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ability to set state #20
Conversation
I'm definitely need soome help with this changing, because don't understand the internal structure of success response because of lack of documentation |
1 similar comment
Sure! Maybe we should start with the falling test? |
Fixed tests for scope
2 similar comments
1 similar comment
1 similar comment
Test were fixed. @sobolevn, plz connect me via telegram: https://t.me/virviil |
@Virviil thanks for your work! Sorry, but I don't have a telegram account. |
Released! https://hex.pm/packages/ueberauth_vk |
Adds ability to set an extra param to vk. It improves security.
VK has ability to pass you back any string, that is set inda "state" parameter.
This can be used to save "session_id" to prevent middle attacks on the auth process.
So, redirect into
/auth/vk?state=<session_id>
should work.After that, this state should be saved inside
success
struct