fix: Manage OAuth2 state

lenra-io · Oct 31, 2023 · 29a2a12 · 29a2a12
1 parent aae484a
commit 29a2a12
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/oauth2.ts b/src/oauth2.ts
@@ -12,6 +12,7 @@ export default class LenraOAuth2Client {
     client: OAuth2Client;
     popup?: OAuthPopup;
     opts: LenraOAuth2Opts;
+    private state: string = (Math.random() + 1).toString(36).substring(2);
 
 
     constructor(
@@ -38,6 +39,7 @@ export default class LenraOAuth2Client {
                 redirectUri: this.opts.redirectUri,
                 codeVerifier,
                 scope: this.opts.scopes,
+                state: this.state,
             });
 
             this.popup = new OAuthPopup(authUrl);
@@ -47,6 +49,7 @@ export default class LenraOAuth2Client {
                 {
                     redirectUri: this.opts.redirectUri,
                     codeVerifier,
+                    state: this.state,
                 }
             );
             sessionStorage.setItem("access_token", token.accessToken);