feat: optional oauth2 module nonce toggle

2023-01-29 17:14:34 -05:00
parent 12233c476d
commit 5f876ced20
2 changed files with 7 additions and 1 deletions
--- a/server/modules/authentication/oauth2/authentication.js
+++ b/server/modules/authentication/oauth2/authentication.js
@@ -19,7 +19,7 @@ module.exports = {
      callbackURL: conf.callbackURL,
      passReqToCallback: true,
      scope: conf.scope,
-      state: true
+      state: conf.enableCSRFProtection
    }, async (req, accessToken, refreshToken, profile, cb) => {
      try {
        const user = await WIKI.models.users.processProfile({