Allow including custom data in the state prop of OAuth2 Request #1587
spetex
started this conversation in
Ideas & Feature Requests
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
What problem does this feature solve?
If you want to redirect user to the same page after logging in with a provider (i.e. Google) you need to include the url of the page where the login has been initialized. The state property serves this purpose.
What does the proposed changes look like?
After the credentials input at the Auth provider page you get redirected to
redirect_uri
which is used for authentication and could parse the state contents and redirect user back where he came from before attempting to log in.Details are described also here:
https://auth0.com/docs/protocols/oauth2/redirect-users
It is not necessary to ditch the CSRF check in the process, both of these could be in the state.
We can add a param which could look like this:
That will be transformed to:
Beta Was this translation helpful? Give feedback.
All reactions