-
Notifications
You must be signed in to change notification settings - Fork 344
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add response_mode=form_post to legacy WebView authorization requests #2780
Conversation
...ity.Client/Platforms/Features/WinFormsLegacyWebUi/WindowsFormsWebAuthenticationDialogBase.cs
Show resolved
Hide resolved
...tity.Client/Platforms/Features/WinFormsLegacyWebUi/CustomWebBrowser.CustomWebBrowserEvent.cs
Show resolved
Hide resolved
...ity.Client/Platforms/Features/WinFormsLegacyWebUi/WindowsFormsWebAuthenticationDialogBase.cs
Show resolved
Hide resolved
....Identity.Client/Platforms/Features/WinFormsLegacyWebUi/WebBrowserBeforeNavigateEventArgs.cs
Outdated
Show resolved
Hide resolved
src/client/Microsoft.Identity.Client/Platforms/Features/WinFormsLegacyWebUi/WebUI.cs
Show resolved
Hide resolved
tests? approving, but having some tests to cover the form_post would be good. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approving. Please add unit test.
Seems like some tests on the build are also failing. |
This reverts commit b87fee4.
Fixes #2743, Fixes #2607, Fixes #2515, Fixes #2749.
Changes proposed in this request
Adding
response_mode=form_post
to authorization URL only for requests using legacy WebView; so that the auth code and other response parameters are returned in the response body and not query.Testing
Unit tests + manual testing.
Performance impact
N/A