Skip to content

Fix oauth client redirect - #17411

Merged
rullzer merged 1 commit into
nextcloud:masterfrom
kinolaev:fix-oauth2-redirect
Oct 7, 2019
Merged

Fix oauth client redirect#17411
rullzer merged 1 commit into
nextcloud:masterfrom
kinolaev:fix-oauth2-redirect

Conversation

@kinolaev

Copy link
Copy Markdown
Member

Problem: Chrome prevents redirect to oauth redirect url because of CSP 'form-action' on grant page. Firefox allows redirect from form submission responses but Chrome doesn't (see MDN, W3C).
Solution: allow oauth redirect url in CSP.

@rullzerrullzer left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice catch!
For bonus point tests would be cool! 😉

Signed-off-by: Sergej Nikolaev <kinolaev@gmail.com>
@kinolaev

Copy link
Copy Markdown
MemberAuthor

Hello @rullzer! Thank you for quick reply, I fixed a test.

@kinolaev

Copy link
Copy Markdown
MemberAuthor

Hello @ChristophWurst, can you please review this small patch? Oauth authentication doesn’t work for now in Chrome.

@rullzer
rullzer merged commit a02a626 into nextcloud:masterOct 7, 2019
@rullzer

Copy link
Copy Markdown
Member

/backport to stable17

@backportbot-nextcloud

Copy link
Copy Markdown

backport to stable17 in #17438

@JamesDAdams

Copy link
Copy Markdown

Same error with nextcloud 20 in Chrome and new Edge browser

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@kinolaev@rullzer@JamesDAdams@ChristophWurst@kesselb