Make the response mode configurable: fragment, query or form_post · mxstbr/micro-github#7

(1 评论) (0 反应) (0 负责人)JavaScript (730 star) (58 fork)batch import

enhancementhelp wanted

描述

For single page apps, you don't want to send the access tokens to the backend server. Putting the access token in the query string will do that. So for single page apps, you'll want to use the hash fragment instead (https://mysite.com#access_token=xyz).

For web applications you might want to use a form post instead of the query string. The end result is the same (both post and querystring will be available in the req), but the main difference is that with a form post the access token is not exposed in the browser history etc...

贡献者指南

技术栈: javascriptnodejs
领域: backendauthentication
议题类型: feature
难度: 3
预计时间: 1-3 hours
活动状态: stale
清晰度: mostly clear
前置要求: basic OAuth understandingNode.jsExpress
新手友好度: 60
研究方向: The issue requests making the OAuth response mode configurable (fragment, query, or form post). Currently, the code likely uses a default mode. Investigate the main server file (e.g., server.js or index.js) where the authentication callback is handled. Check how the access token is returned to the client. The change should allow users to specify the response mode via configuration. Review the existing configuration setup and update the callback URL generation accordingly. The single comment in the issue might provide context.