hedgedoc/lib/web
Dexter Chua a88b4aff2a Generic OAuth2: Set state: true
The OAuth2 specification RECOMMENDS setting the state to protect against
CSRF attacks. Some OAuth2 providers (e.g. ORY Hydra) refuse to
authenticate without the state set.

This is a cherry-pick of 852868419d.

Signed-off-by: haslersn <sebastian.hasler@gmx.net>
2020-10-22 22:50:34 +02:00
..
auth Generic OAuth2: Set state: true 2020-10-22 22:50:34 +02:00
imageRouter Merge pull request #213 from davidmehren/refactor_backend_notes 2019-11-20 20:07:35 +01:00
middleware Move note actions to their own file. 2019-10-27 13:51:53 +01:00
note Fixed meta parsing of lang-attribute for using it in the published-view 2020-07-04 03:37:19 +02:00
baseRouter.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
historyRouter.js Fix eslint warnings 2019-05-31 00:30:29 +02:00
statusRouter.js Add config option for cookie SameSite policy 2020-08-27 02:04:49 +02:00
userRouter.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
utils.js Allow posting new note with content 2018-01-18 10:41:58 +01:00