Skip to content

Commit 31ee4d1

Browse files
committed
Fix state bug
This fixes a bug where the state is url encoded when sent but was not decoded on receipt. Therefore ";" gets encoded and breaks nonce checking logic
1 parent 6e269e2 commit 31ee4d1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/oauth-service.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -269,7 +269,7 @@ export class OAuthService {
269269

270270
var accessToken = parts["access_token"];
271271
var idToken = parts["id_token"];
272-
var state = parts["state"];
272+
var state = decodeURIComponent(parts["state"]);
273273

274274
var oidcSuccess = false;
275275
var oauthSuccess = false;

0 commit comments

Comments
 (0)