From df683991ae00b8f07617915a699978d084ef5478 Mon Sep 17 00:00:00 2001 From: Mike Meessen Date: Mon, 17 Apr 2017 21:32:51 +0200 Subject: [PATCH] Properly unescape redirect_uris before comparing them --- lib/OAuth2.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/OAuth2.php b/lib/OAuth2.php index 31da279..1e1e76a 100644 --- a/lib/OAuth2.php +++ b/lib/OAuth2.php @@ -890,7 +890,7 @@ protected function grantAccessTokenAuthCode(IOAuth2Client $client, array $input) // Validate the redirect URI. If a redirect URI has been provided on input, it must be validated if ($input["redirect_uri"] && !$this->validateRedirectUri( - $input["redirect_uri"], + urldecode($input["redirect_uri"]), $authCode->getRedirectUri() ) ) {