Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

authorize url controller redirects using 302 instead of 307 #139

Open
mildred opened this issue Apr 2, 2021 · 0 comments
Open

authorize url controller redirects using 302 instead of 307 #139

mildred opened this issue Apr 2, 2021 · 0 comments

Comments

@mildred
Copy link

mildred commented Apr 2, 2021

When POSTing a request to my user_*_omniauth_authorize_url, I get redirected to the OAuth endpoint using a 302 response code. This causes the request to be redirected using GET and not POST to the endpoint and makes the auth fails.

The OAuth2Strategy should redirect using the 307 response code which leaves no ambiguity that the redirect should keep the same HTTP method.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant