WordPress IndieAuth is modifying state

wordpress-indieauth – IndieAuth for WordPress

WordPress IndieAuth is modifying state when they have encoded spaces (and stripping encoded =), breaking any login attempts that have those in the secret.

07:34 GWG: I made a test case for you for this issue
https://indieauth.rocks/client/state/

One response on “WordPress IndieAuth is modifying state”

Douglas Beal says:

2018-07-12 at 8:10 am
here is the state from https://🕸💍.ws
“xxxxxxx%2BprWL6VvMXYUgOn5hg2L1krkFOUjbn9%2FXBrA%3D”

and where is what is sent back
“xxxxxxx+prWL6VvMXYUgOn5hg2L1krkFOUjbn9/XBrA”

Also on:
Log in to Reply

One response on “WordPress IndieAuth is modifying state”

Leave a Reply Cancel reply