mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2025-05-20 04:29:29 +02:00
Return access_denied
error when an OAuth2 request is denied (#30974)
According to [RFC 6749](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2.1), when the resource owner or authorization server denied an request, an `access_denied` error should be returned. But currently in this case Gitea does not return any error. For example, if the user clicks "Cancel" here, an `access_denied` error should be returned. <img width="360px" src="be31c09b
-4c0a-4701-b7a4-f54b8fe3a6c5" /> (cherry picked from commit f1d9f18d96050d89a4085c961f572f07b1e653d1) (cherry picked from commit886a675f62
)
This commit is contained in:
parent
40bf161ff0
commit
d841e95191
3 changed files with 13 additions and 2 deletions
|
@ -162,6 +162,7 @@ func (f *AuthorizationForm) Validate(req *http.Request, errs binding.Errors) bin
|
|||
// GrantApplicationForm form for authorizing oauth2 clients
|
||||
type GrantApplicationForm struct {
|
||||
ClientID string `binding:"Required"`
|
||||
Granted bool
|
||||
RedirectURI string
|
||||
State string
|
||||
Scope string
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue