Skip to content
This repository has been archived by the owner on Sep 10, 2021. It is now read-only.

Use CSRF token for googleauth #33

Closed
zachmullen opened this issue Jul 16, 2014 · 0 comments
Closed

Use CSRF token for googleauth #33

zachmullen opened this issue Jul 16, 2014 · 0 comments
Labels
enhancement
Milestone
Version 3.4.0

Comments

@zachmullen
Copy link
Member

We should generate a token and store it in a cookie for the user, then validate it at completion of the OAuth flow to prevent CSRF.
@zachmullen zachmullen mentioned this issue Jul 16, 2014
Merged
zachmullen added a commit that referenced this issue Jul 21, 2014
@zachmullen
Merge pull request #40 from midasplatform/googleauth-csrf
6f7b6fd 
Fixes #33. Use session token for googleauth login to protect from CSRF
@jamiesnape jamiesnape modified the milestone: Version 3.4 Apr 2, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
enhancement
Milestone
Version 3.4.0
Development

No branches or pull requests
2 participants
@zachmullen @jamiesnape