In authorization_code grant, the oauth2orize-openid calls the redirect_uri without uri query string parameters, like the code. So, instead of it redirects to http://example.com/callback?code=foobar, it calls http://example.com/callback.
I found the problem on file lib/response/fragment.js, line 11.
parsed.hash = qs.stringify(params); // wrong
The correct code must be:
parsed.search = qs.stringify(params); // right
I'll send a PR with this fix for review.
Thanks!
In
authorization_codegrant, the oauth2orize-openid calls theredirect_uriwithout uri query string parameters, like thecode. So, instead of it redirects tohttp://example.com/callback?code=foobar, it callshttp://example.com/callback.I found the problem on file
lib/response/fragment.js, line 11.The correct code must be:
I'll send a PR with this fix for review.
Thanks!