You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
access_type:'offline', // will tell Google to send a refreshToken too
310
310
},
311
311
pkce:'S256'
312
-
// check if your provider supports PKCE,
313
-
// in case they do,
314
-
// use of this parameter is highly encouraged
312
+
// check if your provider supports PKCE,
313
+
// in case they do,
314
+
// use of this parameter is highly encouraged
315
315
// in order to prevent authorization code interception attacks
316
316
});
317
317
```
@@ -362,8 +362,8 @@ This fastify plugin adds 6 utility decorators to your fastify instance using the
362
362
363
363
- OR `getAccessTokenFromAuthorizationCodeFlow(request, reply, callback)` variant with 3 arguments, which should be used when PKCE extension is used.
364
364
This allows fastify-oauth2 to delete PKCE code_verifier cookie so it doesn't stay in browser in case server has issue when fetching token. See [Google With PKCE example for more](./examples/google-with-pkce.js).
365
-
366
-
*Important to note*: if your provider supports `S256` as code_challenge_method, always prefer that.
365
+
366
+
*Important to note*: if your provider supports `S256` as code_challenge_method, always prefer that.
367
367
Only use `plain` when your provider doesn't support `S256`.
-`userinfo(tokenOrTokenSet)`: A function to retrieve userinfo data from Authorization Provider. Both token (as object) or `access_token` string value can be passed.
401
401
402
402
Important note:
403
-
Userinfo will only work when `discovery` option is used and such endpoint is advertised by identity provider.
403
+
Userinfo will only work when `discovery` option is used and such endpoint is advertised by identity provider.
404
404
405
405
For a statically configured plugin, you need to make a HTTP call yourself.
0 commit comments