server/handlers.go · cd0c24ec4db226d3146d8e30164372fd5f9a62f4 · hdacloud / dex

4 years ago

fix: add an extra endpoint to avoid refresh generating AuthRequests. · cd0c24ec


By adding an extra endpoint and a redirect, we can avoid a situation
where it's trivially easy to generate a large number of AuthRequests
by hitting F5/refresh in the browser.

Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>

cd0c24ec

History

fix: add an extra endpoint to avoid refresh generating AuthRequests.

Alastair Houghton authored 4 years ago


By adding an extra endpoint and a redirect, we can avoid a situation
where it's trivially easy to generate a large number of AuthRequests
by hitting F5/refresh in the browser.

Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>

Code owners

Assign users and groups as approvers for specific file changes. Learn more.