codimd/lib/config
Samuel Trégouët 6ff6d215ab fix: add state parameter for oauth2
state parameter is recommended with oauth2 authentification
to mitigate CSRF attacks (see [1]).
hydra [2] will throw the following error message if state is
missing:

  description="The state is missing or has less than 8 characters and is therefore considered too weak" error=invalid_state hint="Request
 parameter \"state\" must be at least be 8 characters long to ensure sufficient entropy."

[1]: https://auth0.com/docs/protocols/oauth2/oauth-state
[2]: https://www.ory.sh/hydra/

Signed-off-by: Samuel Trégouët <samuel.tregouet@gmail.com>
2020-05-11 15:59:49 +02:00
..
default.js fix: add state parameter for oauth2 2020-05-11 15:59:49 +02:00
defaultSSL.js Rename forgotten values 2018-03-26 20:15:45 +02:00
dockerSecret.js fix: some environment variables not in docker secret 2020-03-06 20:51:25 +08:00
enum.js refactor(config.js): Extract config file 2017-05-08 19:29:07 +08:00
environment.js fix: add state parameter for oauth2 2020-05-11 15:59:49 +02:00
index.js doc: remove HMD related and remove docs 2020-03-02 18:35:25 +08:00
utils.js Fix wrong reading from commit 2018-11-12 11:18:38 +01:00