allow oauth style autodetection (#232)

pomdtr · thdxr · web-flow · commit 421441613b5b · 2025-03-27T13:04:40.000-04:00
* only delete oauth code when tokens are emitted

* Create stupid-boats-play.md

---------

Co-authored-by: Dax &lt;mail@thdxr.com&gt;
diff --git a/.changeset/stupid-boats-play.md b/.changeset/stupid-boats-play.md
@@ -0,0 +1,5 @@
+---
+"@openauthjs/openauth": patch
+---
+
+allow auth style autodetection
diff --git a/packages/openauth/src/issuer.ts b/packages/openauth/src/issuer.ts
@@ -830,7 +830,6 @@ export function issuer<
             400,
           )
         }
-        await Storage.remove(storage, key)
         if (payload.redirectURI !== form.get("redirect_uri")) {
           return c.json(
             {
@@ -879,6 +878,7 @@ export function issuer<
           }
         }
         const tokens = await generateTokens(c, payload)
+        await Storage.remove(storage, key)
         return c.json({
           access_token: tokens.access,
           expires_in: tokens.expiresIn,

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@openauthjs/openauth": patch
 +---
++
 +allow auth style autodetection
Original file line number	Diff line number	Diff line change
`@@ -830,7 +830,6 @@ export function issuer<`
`830`	`830`	`400,`
`831`	`831`	`)`
`832`	`832`	`}`
`833`		`- await Storage.remove(storage, key)`
`834`	`833`	`if (payload.redirectURI !== form.get("redirect_uri")) {`
`835`	`834`	`return c.json(`
`836`	`835`	`{`
`@@ -879,6 +878,7 @@ export function issuer<`
`879`	`878`	`}`
`880`	`879`	`}`
`881`	`880`	`const tokens = await generateTokens(c, payload)`
	`881`	`+ await Storage.remove(storage, key)`
`882`	`882`	`return c.json({`
`883`	`883`	`access_token: tokens.access,`
`884`	`884`	`expires_in: tokens.expiresIn,`