Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Redirect to callback URL during error scenarios according to the response type #1441

Conversation

kasundharmadasa
Copy link
Contributor

Front porting the fix from the PR https://github.com/wso2-support/identity-inbound-auth-oauth/pull/631 into master

Related Issues

wso2/product-is#5277 (Code fixed for the PR: #617)

wso2/product-is#7673

return Boolean.parseBoolean(IdentityUtil.getProperty(ALLOW_ADDITIONAL_PARAMS_FROM_ERROR_URL));
String isAllowAdditionalParamsEnabled = IdentityUtil.getProperty(ALLOW_ADDITIONAL_PARAMS_FROM_ERROR_URL);

if (StringUtils.isNotBlank(isAllowAdditionalParamsEnabled)) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't this be the other way in the master?

ie. by default we should not allow additional params in the error URL as it violates the spec

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Made isAllowAdditionalParamsEnabled be false by default. Thank you for pointing that out.

Copy link

@jenkins-is-staging jenkins-is-staging left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving the pull request based on the successful Jenkins job https://jenkins-support-all.wso2.com/jenkins/job/DEV_PR_BUILDER/731/, started by ,

@vihanga-liyanage vihanga-liyanage merged commit b9ec616 into wso2-extensions:master Sep 11, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants