diff options
Diffstat (limited to 'vendor/code.superseriousbusiness.org/oauth2/v4/server/server.go')
| -rw-r--r-- | vendor/code.superseriousbusiness.org/oauth2/v4/server/server.go | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/vendor/code.superseriousbusiness.org/oauth2/v4/server/server.go b/vendor/code.superseriousbusiness.org/oauth2/v4/server/server.go index 82f6ff8c3..91b9effb7 100644 --- a/vendor/code.superseriousbusiness.org/oauth2/v4/server/server.go +++ b/vendor/code.superseriousbusiness.org/oauth2/v4/server/server.go @@ -1,6 +1,7 @@ package server import ( + "cmp" "context" "encoding/json" "fmt" @@ -176,7 +177,10 @@ func (s *Server) ValidationAuthorizeRequest(r *http.Request) (*AuthorizeRequest, ccm := oauth2.CodeChallengeMethod(r.FormValue("code_challenge_method")) // set default if ccm == "" { - ccm = oauth2.CodeChallengePlain + ccm = cmp.Or( + s.Config.DefaultCodeChallengeMethod, + oauth2.CodeChallengePlain, + ) } if ccm.String() != "" && !s.CheckCodeChallengeMethod(ccm) { return nil, errors.ErrUnsupportedCodeChallengeMethod |