mirror of
https://github.com/j93es/oauth-backend.git
synced 2026-06-04 02:41:52 +09:00
32 lines
969 B
Python
32 lines
969 B
Python
from lib.report_vuln import report_vuln
|
|
from lib.utils.is_oauth_uri import is_oauth_uri
|
|
from urllib.parse import urlparse, parse_qs
|
|
|
|
class ScopeDetection:
|
|
def get_scope_from_query(self, query: str) -> str | None:
|
|
if not query:
|
|
return None
|
|
parsed = parse_qs(query)
|
|
scope_values = parsed.get("scope", [])
|
|
if scope_values:
|
|
return scope_values[0]
|
|
return None
|
|
|
|
async def test(self, flow):
|
|
if not is_oauth_uri(flow.request.pretty_url):
|
|
return
|
|
|
|
req = flow.request
|
|
|
|
parsed = urlparse(req.pretty_url)
|
|
query = parsed.query
|
|
|
|
query_scope = self.get_scope_from_query(query)
|
|
|
|
if query_scope in ["all", "*"]:
|
|
report_vuln(
|
|
title="OAuth Scope Value Issue",
|
|
desc=f"Scope value issue detected in request: {query_scope}",
|
|
status="WARNING",
|
|
uri=req.pretty_url
|
|
)
|