-
Notifications
You must be signed in to change notification settings - Fork 99
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Update new Application creation URLs #514
Conversation
@@ -479,7 +479,7 @@ public static function create_client( $domain, $app_token, $name ) { | |||
'app_type' => 'regular_web', | |||
|
|||
'callbacks' => array( | |||
$options->get_wp_auth0_url(), | |||
site_url(), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This the same URL?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same URL except get_wp_auth0_url()
has a URL param. Query strings aren't validated so I'm basically just removing the query string.
@@ -492,8 +492,8 @@ public static function create_client( $domain, $app_token, $name ) { | |||
|
|||
// A set of URLs that are valid to redirect to after logout from Auth0 | |||
'allowed_logout_urls' => array( | |||
$options->get_logout_url(), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What happens if someone currently has logout set to logout url? I mean seems weird, just asking.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same as the other, just removing query strings because they're not validated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
28a2d20
to
100f9fe
Compare
Changing to URLs without a query string.