feat(auth): OAuth2 access_token in GET query string in userInfoURL (#5188)

2022-04-17 02:39:07 +02:00
parent a647626a51
commit de151031ea
2 changed files with 7 additions and 1 deletions
--- a/server/modules/authentication/oauth2/authentication.js
+++ b/server/modules/authentication/oauth2/authentication.js
@@ -37,7 +37,7 @@ module.exports = {
    })

    client.userProfile = function (accesstoken, done) {
-      this._oauth2._useAuthorizationHeaderForGET = true
+      this._oauth2._useAuthorizationHeaderForGET = !conf.useQueryStringForAccessToken
      this._oauth2.get(conf.userInfoURL, accesstoken, (err, data) => {
        if (err) {
          return done(err)