diff options
| author |  tobi <tobi.smethurst@protonmail.com> | 2025-06-05 11:29:36 +0200 |
|---|---|---|
| committer |  tobi <kipvandenbos@noreply.codeberg.org> | 2025-06-05 11:29:36 +0200 |
| commit | 118d4e4d0361c7bc52c3092ba34273a31122c0db (patch) | |
| tree | 5688c50659b77a9440a9dd49c53a103d1599ed83 /internal/oauth/server.go | |
| parent | [feature] Add config option to expose custom emojis without auth (#4233) (diff) | |
| download | gotosocial-118d4e4d0361c7bc52c3092ba34273a31122c0db.tar.xz | |
[bugfix] Assume default code challenge method of s256 (#4241)
Bumps our oauth2 dependency, and uses *default* code challenge method of S256 instead of plain.
Fixes https://codeberg.org/superseriousbusiness/gotosocial/issues/4238
Reviewed-on: https://codeberg.org/superseriousbusiness/gotosocial/pulls/4241
Co-authored-by: tobi <tobi.smethurst@protonmail.com>
Co-committed-by: tobi <tobi.smethurst@protonmail.com>
Diffstat (limited to 'internal/oauth/server.go')
| -rw-r--r-- | internal/oauth/server.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/internal/oauth/server.go b/internal/oauth/server.go index 05872318a..b61a86ea1 100644 --- a/internal/oauth/server.go +++ b/internal/oauth/server.go @@ -128,6 +128,7 @@ func New( AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{ oauth2.CodeChallengeS256, }, + DefaultCodeChallengeMethod: oauth2.CodeChallengeS256, }, manager, ) |