Skip to content

fix(auth): rotate OAuth state per authorization flow - #35

Open
LimiNode wants to merge 1 commit into
mainfrom
fix/oauth-state-rotation
Open

LimiNode wants to merge 1 commit into
mainfrom
fix/oauth-state-rotation

Conversation

@LimiNode

Copy link
Copy Markdown
Owner

Summary

  • generate a fresh OAuth state value for every successful authorization URL build
  • assert state and PKCE verifier rotation independently in the focused URL test

Verification

  • strict C++11 syntax check for tests/auth/test_oauth_url.cpp
  • cmake --build ... --target test_oauth_url
  • ctest -R '^test_oauth_url$' --output-on-failure
  • git diff --check

Constraint: preserve C++11 compatibility and keep the change focused

Directive: compare state and PKCE verifier independently in regression tests

Confidence: high

Scope-risk: narrow
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant