Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

avoid re-using stale state in parallel auth flows #10

Merged
merged 1 commit into from
Oct 7, 2024

Conversation

mattbnz
Copy link
Contributor

@mattbnz mattbnz commented Oct 7, 2024

Separates transaction creation and resumption into explicitly separate functions that are called explicitly from the appropriate request handler in the provider, rather than create/resume being called in order in the base handler itself.

There are no use-cases where both creation and resumption are expected to occur in a single request, so the previous implementation is bug-prone.

Fixes: #9

Separates transaction creation and resumption into explicitly separate
functions that are called explicitly from the appropriate request
handler in the provider, rather than create/resume being called in order
in the base handler itself.

There are no use-cases where both creation and resumption are expected
to occur in a single request, so the previous implementation is
bug-prone.

Fixes: superfly#9
Copy link
Member

@btoews btoews left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for opening this. The issue/fix make sense to me.

@btoews btoews merged commit 822a18a into superfly:main Oct 7, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

transaction cookie handling causes state re-use and mix-ups when a user initiates parallel oauth flows
2 participants