mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-15 21:40:31 +00:00
fix: improve auth step to avoid takeovers
This commit is contained in:
@@ -7,6 +7,7 @@ import { OAuthCallbackPage } from "./OauthCallbackPage";
|
||||
const SettingsOAuthCallbackPageQueryParamsSchema = z.object({
|
||||
state: z
|
||||
.object({
|
||||
clientId: z.string(),
|
||||
tenantId: z.string(),
|
||||
slug: z.string(),
|
||||
description: z.string().optional(),
|
||||
@@ -15,8 +16,7 @@ const SettingsOAuthCallbackPageQueryParamsSchema = z.object({
|
||||
})
|
||||
.nullable()
|
||||
.catch(null),
|
||||
tenant: z.string().catch(""),
|
||||
admin_consent: z.string().catch("")
|
||||
code: z.string().catch("")
|
||||
});
|
||||
|
||||
export const Route = createFileRoute(
|
||||
|
||||
Reference in New Issue
Block a user