Skip to content

Scope parameter forgotten if "me" is not included #215

@tomlarkworthy

Description

@tomlarkworthy

If the "me" parameter is not included the site will serve the sign_in chooser at the beginning of the auth flow and then redirect the user back to /auth. However, after the user chooses their identify URL in sign_in the original scope parameter is not forwarded.

If "me" is nil hydrate signin-form

https://github.com/aaronpk/IndieAuth.com/blob/main/controllers/auth-web.rb#L188

  1. If me is not nil read the "scope" param

https://github.com/aaronpk/IndieAuth.com/blob/main/controllers/auth-web.rb#L217

  1. Note: the signing form does not have a scope parameter

<form action="<%= SiteConfig.root %>/auth" method="get" class="well" style="margin: 20px 0;">

can be reprod with https://observablehq.com/@tomlarkworthy/weblogin

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions