Samuel Trégouët 6ff6d215ab fix: add state parameter for oauth2 ...

state parameter is recommended with oauth2 authentification
to mitigate CSRF attacks (see [1]).
hydra [2] will throw the following error message if state is
missing:

  description="The state is missing or has less than 8 characters and is therefore considered too weak" error=invalid_state hint="Request
 parameter \"state\" must be at least be 8 characters long to ensure sufficient entropy."

[1]: https://auth0.com/docs/protocols/oauth2/oauth-state
[2]: https://www.ory.sh/hydra/

Signed-off-by: Samuel Trégouët <samuel.tregouet@gmail.com>

2020-05-11 15:59:49 +02:00

..

default.js

fix: add state parameter for oauth2

2020-05-11 15:59:49 +02:00

defaultSSL.js

Rename forgotten values

2018-03-26 20:15:45 +02:00

dockerSecret.js

fix: some environment variables not in docker secret

2020-03-06 20:51:25 +08:00

enum.js

refactor(config.js): Extract config file

2017-05-08 19:29:07 +08:00

environment.js

fix: add state parameter for oauth2

2020-05-11 15:59:49 +02:00

index.js

doc: remove HMD related and remove docs

2020-03-02 18:35:25 +08:00

utils.js

Fix wrong reading from commit

2018-11-12 11:18:38 +01:00