Commit 2e87ea5c authored by Liang Ding's avatar Liang Ding

🔒 Fix #12549

parent f3d66542
...@@ -121,7 +121,7 @@ public class OAuthGitHubProcessor { ...@@ -121,7 +121,7 @@ public class OAuthGitHubProcessor {
*/ */
@RequestProcessing(value = "/oauth/github/redirect", method = HTTPRequestMethod.GET) @RequestProcessing(value = "/oauth/github/redirect", method = HTTPRequestMethod.GET)
public void redirectGitHub(final HttpServletResponse response) throws Exception { public void redirectGitHub(final HttpServletResponse response) throws Exception {
final String state = Latkes.getServePath(); final String state = Latkes.getServePath() + ":::" + RandomStringUtils.randomAlphanumeric(16);
STATES.put(state, URLs.encode(state)); STATES.put(state, URLs.encode(state));
final String path = "https://github.com/login/oauth/authorize" + "?client_id=" + CLIENT_ID + "&state=" + state final String path = "https://github.com/login/oauth/authorize" + "?client_id=" + CLIENT_ID + "&state=" + state
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment