state param fix

amocrm · Sep 26, 2019 · a33d2da · a33d2da
1 parent da536aa
commit a33d2da
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/example.php b/example.php
@@ -26,7 +26,7 @@
          * Просто отображаем кнопку авторизации или получаем ссылку для авторизации
          * По-умолчанию - отображаем кнопку
          */
-        $_SESSION['oauth2state'] = $provider->getState();
+        $_SESSION['oauth2state'] = bin2hex(random_bytes(16));
         if (true) {
             echo '<div>
                 <script
@@ -49,7 +49,7 @@ class="amocrm_oauth"
             </script>';
             die;
         } else {
-            $authorizationUrl = $provider->getAuthorizationUrl();
+            $authorizationUrl = $provider->getAuthorizationUrl(['state' => $_SESSION['oauth2state']]);
             header('Location: ' . $authorizationUrl);
         }
     } elseif (empty($_GET['state']) || empty($_SESSION['oauth2state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {