whs-authz-authn/oauth-backend
1
0
Fork 0
mirror of https://github.com/j93es/oauth-backend.git synced 2026-06-04 05:41:52 +09:00
Code Issues Projects Releases Packages Wiki Activity

open redirect

Browse source
This commit is contained in:
gyuu04 2025-07-13 14:28:11 +09:00
commit 9898f215f3
3 changed files with 1292 additions and 1404 deletions
Download patch file Download diff file Expand all files Collapse all files

4
addon/init.py
View file

@ -4,7 +4,7 @@ from pkce_check import PKCEDowngradeChecker
from addon.scope_detection import ScopeDetection
from csrf_check import CsrfChecker
from client_secret import ClientSecret
from redirect_uri_check import RedirectBypassChecker
from addon.open_redirect_check import OpenRedirectChecker
from access_token import AccessTokenScanner
from addon.google_login_hint import GoogleLoginHint
from addon.google_response_type_token import GoogleResponseTypeToken
@ -73,6 +73,7 @@ class AddonBase:
tasks = [
try_catch(PKCEDowngradeChecker().test(flow)),
try_catch(OpenRedirectChecker().test(flow)),
]
await asyncio.gather(*tasks)
@ -85,7 +86,6 @@ class AddonBase:
try_catch(ScopeDetection().test(flow)),
try_catch(ClientSecret().test(flow)),
try_catch(AccessTokenScanner().scan(flow)),
try_catch(RedirectBypassChecker().test(flow)),
try_catch(GoogleResponseTypeToken().test(flow)),
]
await asyncio.gather(*tasks)

1290
addon/open_redirect_check.py Normal file
View file

File diff suppressed because it is too large Load diff

1402
addon/redirect_uri_check.py
View file

File diff suppressed because it is too large Load diff