Browse Source

Fix: update OAuth2 state storage initialization and state token encoding

pull/6388/head
hnolde 4 weeks ago
parent
commit
7e3acf26b4
  1. 2
      src/api/admin.rs

2
src/api/admin.rs

@ -370,7 +370,7 @@ fn oauth2_authorize(_token: AdminToken) -> Result<Redirect, Error> {
let scopes = CONFIG.smtp_oauth2_scopes();
// Generate a random state token for CSRF protection
let state = crate::crypto::encode_random_bytes::<32>(BASE64URL_NOPAD);
let state = crate::crypto::encode_random_bytes::<32>(&BASE64URL_NOPAD);
// Store state with expiration (10 minutes from now)
let expiration = SystemTime::now().duration_since(UNIX_EPOCH).unwrap().as_secs() + 600;

Loading…
Cancel
Save