Skip to content

Commit b5ef724

Browse files
committed
fix: Generate state parameter in constructor for OAuth security
1 parent 4c9f6fe commit b5ef724

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

src/main/java/com/contentstack/cms/oauth/OAuthHandler.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@ public OAuthHandler(OkHttpClient httpClient, OAuthConfig config) {
5151

5252
// Validate config before proceeding
5353
config.validate();
54+
this.state = generateCodeVerifier();
5455

5556
// Generate PKCE parameters if needed
5657
if (config.isPkceEnabled()) {
@@ -104,7 +105,7 @@ private String generateCodeChallenge(String verifier) {
104105
private void generatePkceParameters() {
105106
this.codeVerifier = generateCodeVerifier();
106107
this.codeChallenge = generateCodeChallenge(this.codeVerifier);
107-
this.state = generateCodeVerifier(); // Use same method for state
108+
108109
}
109110

110111
/**

0 commit comments

Comments
 (0)